- Removed RsIface, and moved configuration options to RsServerConfig (rsconfig.h)

- Fixed cipher list to "HIGH:!DSS:!aNULL:!3DES", which should disable the weak ones, no idea how to force it to PFS (which it should use).
 - fixed void * pointer maths.




git-svn-id: http://svn.code.sf.net/p/retroshare/code/trunk@6584 b45a01b8-16f6-495d-af2f-9b41ad6348cc
This commit is contained in:
drbob 2013-08-21 21:36:33 +00:00
parent ebbf6d9e26
commit f93ed1fb6e
12 changed files with 61 additions and 312 deletions
libretroshare/src/pqi

View file

@ -326,7 +326,10 @@ static int initLib = 0;
sslctx = SSL_CTX_new(TLSv1_method());
// setup cipher lists.
SSL_CTX_set_cipher_list(sslctx, "DEFAULT");
std::string cipherString = "HIGH:!DSS:!aNULL:!3DES";
//SSL_CTX_set_cipher_list(sslctx, "DEFAULT");
SSL_CTX_set_cipher_list(sslctx, cipherString.c_str());
// certificates (Set Local Server Certificate).
FILE *ownfp = RsDirUtil::rs_fopen(cert_file, "r");