1
0
mirror of https://github.com/SoftEtherVPN/SoftEtherVPN.git synced 2024-11-25 02:49:52 +03:00

Modified cipher list used for SSL.

Existing cipher list was insecure, specifying RC4 first followed by AES
New list h/t: http://skytale.net/blog/archives/22-SSL-cipher-setting.html.
This commit is contained in:
Gregory Norton 2014-12-31 11:19:07 -06:00
parent bbd672e829
commit 7bf827fb52

View File

@ -233,7 +233,7 @@ static COUNTER *getip_thread_counter = NULL;
static UINT max_getip_thread = 0; static UINT max_getip_thread = 0;
static char *cipher_list = "RC4-MD5 RC4-SHA AES128-SHA AES256-SHA DES-CBC-SHA DES-CBC3-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA"; static char *cipher_list = "TLSv1+HIGH:!SSLv2:RC4+MEDIUM:!aNULL:!eNULL:!3DES:@STRENGTH";
static LIST *ip_clients = NULL; static LIST *ip_clients = NULL;
static LIST *local_mac_list = NULL; static LIST *local_mac_list = NULL;