]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Disable export ciphers by default for OpenSSL builds.
authorSteffan Karger <steffan@karger.me>
Wed, 1 Jan 2014 20:10:26 +0000 (21:10 +0100)
committerGert Doering <gert@greenie.muc.de>
Sun, 5 Jan 2014 17:41:54 +0000 (18:41 +0100)
commit56ab21091c0f1e07d0a6ef7815160f6ae072498d
treed7cf67234ea29778ce4e23375653a1fad2067d27
parente83313a8ba92684a660c9d78c536699f67dcdf63
Disable export ciphers by default for OpenSSL builds.

Export ciphers are deliberately weak ciphers, and not fully supported by
OpenVPN since ephemeral RSA support has been removed a few commits ago.
This commit removes them from the default cipher list to avoid confusion.

PolarSSL does not support export ciphers, so no action required there.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1388607026-12297-7-git-send-email-steffan@karger.me>
URL: http://article.gmane.org/gmane.network.openvpn.devel/8146
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl_openssl.c