diff mbox series

[LEDE-DEV,2/2] ustream-ssl: Remove RC4 from ciphersuite in server mode.

Message ID 20180401013729.5079-2-rosenp@gmail.com
State Accepted
Delegated to: John Crispin
Headers show
Series None | expand

Commit Message

Rosen Penev April 1, 2018, 1:37 a.m. UTC 
SSLlabs complains that RC4 is enabled as it is insecure, thereby capping the grade to B.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
---
 ustream-openssl.c | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/ustream-openssl.c b/ustream-openssl.c
index 2faa855..eb03dab 100644
--- a/ustream-openssl.c
+++ b/ustream-openssl.c
@@ -52,6 +52,8 @@  __ustream_ssl_context_new(bool server)
 #ifndef OPENSSL_NO_ECDH
 	SSL_CTX_set_ecdh_auto(c, 1);
 #endif
+	if (server)
+		SSL_CTX_set_cipher_list(c, "DEFAULT:!RC4:@STRENGTH");
 	SSL_CTX_set_quiet_shutdown(c, 1);
 
 	return (void *) c;