1
0
mirror of https://github.com/moparisthebest/curl synced 2024-11-10 11:35:07 -05:00
curl/lib/vtls
Daniel Stenberg 3b5c75ef3d OpenSSL: deselect weak ciphers by default
By default even recent versions of OpenSSL support and accept both
"export strength" ciphers, small-bitsize ciphers as well as downright
deprecated ones.

This change sets a default cipher set that avoids the worst ciphers, and
subsequently makes https://www.howsmyssl.com/a/check no longer grade
curl/OpenSSL connects as 'Bad'.

Bug: http://curl.haxx.se/bug/view.cgi?id=1323
Reported-by: Jeff Hodges
2014-01-12 00:14:01 +01:00
..
axtls.c vtls: Updated comments referencing sslgen.c and ssluse.c 2013-12-26 21:42:22 +00:00
axtls.h vtls: moved all TLS/SSL source and header files into subdir 2013-12-20 17:12:42 +01:00
curl_darwinssl.c darwinssl: un-break Leopard build after PKCS#12 change 2014-01-09 17:53:29 -06:00
curl_darwinssl.h vtls: moved all TLS/SSL source and header files into subdir 2013-12-20 17:12:42 +01:00
curl_schannel.c vtls: Updated comments referencing sslgen.c and ssluse.c 2013-12-26 21:42:22 +00:00
curl_schannel.h vtls: moved all TLS/SSL source and header files into subdir 2013-12-20 17:12:42 +01:00
cyassl.c vtls: Updated comments referencing sslgen.c and ssluse.c 2013-12-26 21:42:22 +00:00
cyassl.h vtls: moved all TLS/SSL source and header files into subdir 2013-12-20 17:12:42 +01:00
gskit.c vtls: Fixed up include of vtls.h 2013-12-26 21:25:51 +00:00
gskit.h vtls: Updated comments referencing sslgen.c and ssluse.c 2013-12-26 21:42:22 +00:00
gtls.c vtls: Updated comments referencing sslgen.c and ssluse.c 2013-12-26 21:42:22 +00:00
gtls.h vtls: moved all TLS/SSL source and header files into subdir 2013-12-20 17:12:42 +01:00
nss.c vtls: Updated comments referencing sslgen.c and ssluse.c 2013-12-26 21:42:22 +00:00
nssg.h vtls: Updated comments referencing sslgen.c and ssluse.c 2013-12-26 21:42:22 +00:00
openssl.c OpenSSL: deselect weak ciphers by default 2014-01-12 00:14:01 +01:00
openssl.h OpenSSL: deselect weak ciphers by default 2014-01-12 00:14:01 +01:00
polarssl_threadlock.c vtls: moved all TLS/SSL source and header files into subdir 2013-12-20 17:12:42 +01:00
polarssl_threadlock.h vtls: moved all TLS/SSL source and header files into subdir 2013-12-20 17:12:42 +01:00
polarssl.c vtls: Updated comments referencing sslgen.c and ssluse.c 2013-12-26 21:42:22 +00:00
polarssl.h vtls: moved all TLS/SSL source and header files into subdir 2013-12-20 17:12:42 +01:00
qssl.c vtls: Fixed up include of vtls.h 2013-12-26 21:25:51 +00:00
qssl.h vtls: Updated comments referencing sslgen.c and ssluse.c 2013-12-26 21:42:22 +00:00
vtls.c vtls: renamed sslgen.[ch] to vtls.[ch] 2013-12-20 17:12:42 +01:00
vtls.h vtls: renamed sslgen.[ch] to vtls.[ch] 2013-12-20 17:12:42 +01:00