From: Shuanglei Tao Date: Sun, 14 Apr 2019 10:30:07 +0000 (+0800) Subject: server: use the default ssl_cipher_list X-Git-Url: http://git.prime8.dev/?a=commitdiff_plain;h=348de8e0a7baab49014ee0f1db2c51e4d4404e6f;p=ttyd.git server: use the default ssl_cipher_list --- diff --git a/src/server.c b/src/server.c index 9d7703e..c3feea7 100644 --- a/src/server.c +++ b/src/server.c @@ -420,19 +420,6 @@ main(int argc, char **argv) { info.ssl_cert_filepath = cert_path; info.ssl_private_key_filepath = key_path; info.ssl_ca_filepath = ca_path; - info.ssl_cipher_list = "ECDHE-ECDSA-AES256-GCM-SHA384:" - "ECDHE-RSA-AES256-GCM-SHA384:" - "DHE-RSA-AES256-GCM-SHA384:" - "ECDHE-RSA-AES256-SHA384:" - "HIGH:!aNULL:!eNULL:!EXPORT:" - "!DES:!MD5:!PSK:!RC4:!HMAC_SHA1:" - "!SHA1:!DHE-RSA-AES128-GCM-SHA256:" - "!DHE-RSA-AES128-SHA256:" - "!AES128-GCM-SHA256:" - "!AES128-SHA256:" - "!DHE-RSA-AES256-SHA256:" - "!AES256-GCM-SHA384:" - "!AES256-SHA256"; if (strlen(info.ssl_ca_filepath) > 0) info.options |= LWS_SERVER_OPTION_REQUIRE_VALID_OPENSSL_CLIENT_CERT; #if LWS_LIBRARY_VERSION_MAJOR >= 2