From 340298e90cd680a2cfde1966bb8ff0a7fea4b527 Mon Sep 17 00:00:00 2001 From: "C. McEnroe" Date: Tue, 28 Jul 2020 18:07:50 -0400 Subject: tls_internal: Replace default ciphers with compat --- tls_internal.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tls_internal.h b/tls_internal.h index 1dd5f45..be82c85 100644 --- a/tls_internal.h +++ b/tls_internal.h @@ -32,7 +32,7 @@ __BEGIN_HIDDEN_DECLS #define TLS_DEFAULT_CA_FILE "/etc/ssl/cert.pem" #endif -#define TLS_CIPHERS_DEFAULT "TLSv1.3:TLSv1.2+AEAD+ECDHE:TLSv1.2+AEAD+DHE" +#define TLS_CIPHERS_DEFAULT TLS_CIPHERS_COMPAT #define TLS_CIPHERS_COMPAT "HIGH:!aNULL" #define TLS_CIPHERS_LEGACY "HIGH:MEDIUM:!aNULL" #define TLS_CIPHERS_ALL "ALL:!aNULL:!eNULL" -- cgit 1.4.1