diff options
| author | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2013-10-08 21:24:10 +0900 |
|---|---|---|
| committer | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2013-10-08 21:26:13 +0900 |
| commit | 33293bcd5af9b643b9486990033664da6f628eb7 (patch) | |
| tree | a3ba0a142056a0fa6aaab6b045db2c1763d361b1 /src | |
| parent | 98d88ec6d55ce9e510b98ac1bf32bbeda00f25d5 (diff) | |
LibsslTLSContext: Remove weak cipher suite
Diffstat (limited to 'src')
| -rw-r--r-- | src/LibsslTLSContext.cc | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/LibsslTLSContext.cc b/src/LibsslTLSContext.cc index 8d734cce..c6543b15 100644 --- a/src/LibsslTLSContext.cc +++ b/src/LibsslTLSContext.cc @@ -98,6 +98,7 @@ OpenSSLTLSContext::OpenSSLTLSContext(TLSSessionSide side) good_ = false; A2_LOG_ERROR(fmt("SSL_CTX_new() failed. Cause: %s", ERR_error_string(ERR_get_error(), 0))); + return; } // Disable SSLv2 and enable all workarounds for buggy servers SSL_CTX_set_options(sslCtx_, SSL_OP_ALL | SSL_OP_NO_SSLv2 @@ -111,6 +112,11 @@ OpenSSLTLSContext::OpenSSLTLSContext(TLSSessionSide side) /* keep memory usage low */ SSL_CTX_set_mode(sslCtx_, SSL_MODE_RELEASE_BUFFERS); #endif + if(SSL_CTX_set_cipher_list(sslCtx_, "HIGH:!aNULL:!eNULL") == 0) { + good_ = false; + A2_LOG_ERROR(fmt("SSL_CTX_set_cipher_list() failed. Cause: %s", + ERR_error_string(ERR_get_error(), nullptr))); + } } OpenSSLTLSContext::~OpenSSLTLSContext() |