]> prime8.dev >> repos - ttyd.git/commitdiff
server: use the default ssl_cipher_list
authorShuanglei Tao <tsl0922@gmail.com>
Sun, 14 Apr 2019 10:30:07 +0000 (18:30 +0800)
committerShuanglei Tao <tsl0922@gmail.com>
Sun, 14 Apr 2019 10:30:07 +0000 (18:30 +0800)
src/server.c

index 9d7703e11c198c0c1b89c1b998b88feab021976b..c3feea79a6d8c07583559be3fee16610127b1747 100644 (file)
@@ -420,19 +420,6 @@ main(int argc, char **argv) {
         info.ssl_cert_filepath = cert_path;
         info.ssl_private_key_filepath = key_path;
         info.ssl_ca_filepath = ca_path;
-        info.ssl_cipher_list = "ECDHE-ECDSA-AES256-GCM-SHA384:"
-                "ECDHE-RSA-AES256-GCM-SHA384:"
-                "DHE-RSA-AES256-GCM-SHA384:"
-                "ECDHE-RSA-AES256-SHA384:"
-                "HIGH:!aNULL:!eNULL:!EXPORT:"
-                "!DES:!MD5:!PSK:!RC4:!HMAC_SHA1:"
-                "!SHA1:!DHE-RSA-AES128-GCM-SHA256:"
-                "!DHE-RSA-AES128-SHA256:"
-                "!AES128-GCM-SHA256:"
-                "!AES128-SHA256:"
-                "!DHE-RSA-AES256-SHA256:"
-                "!AES256-GCM-SHA384:"
-                "!AES256-SHA256";
         if (strlen(info.ssl_ca_filepath) > 0)
             info.options |= LWS_SERVER_OPTION_REQUIRE_VALID_OPENSSL_CLIENT_CERT;
 #if LWS_LIBRARY_VERSION_MAJOR >= 2