Use the default ciphers for OpenSSL 1.1 and later
cf. https://bugs.launchpad.net/ubuntu/+source/w3m/+bug/1325674
36f14df378/f/Fix-the-cipher-list-string-to-ensure-that-it-contain.patch
https://fedoraproject.org/wiki/Packaging:CryptoPolicies
This commit is contained in:
2
url.c
2
url.c
@@ -336,7 +336,9 @@ openSSLHandle(int sock, char *hostname, char **p_cert)
|
||||
#endif
|
||||
if (!(ssl_ctx = SSL_CTX_new(SSLv23_client_method())))
|
||||
goto eend;
|
||||
#if (OPENSSL_VERSION_NUMBER < 0x10100000L) || defined(LIBRESSL_VERSION_NUMBER)
|
||||
SSL_CTX_set_cipher_list(ssl_ctx, "DEFAULT:!LOW:!RC4:!EXP");
|
||||
#endif
|
||||
option = SSL_OP_ALL;
|
||||
if (ssl_forbid_method) {
|
||||
if (strchr(ssl_forbid_method, '2'))
|
||||
|
Reference in New Issue
Block a user