Update cipher suites to eliminate anonymous authentication methods

This commit is contained in:
dmiller 2017-07-29 05:55:27 +00:00
parent cf56f93d95
commit 0d21bd42e2
6 changed files with 9 additions and 5 deletions

View file

@ -71,7 +71,7 @@
* OpenSSL. To see exactly what ciphers are enabled, use the command
* openssl ciphers -v '...'
* where ... is the string below. */
#define CIPHERS_SECURE "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH"
#define CIPHERS_SECURE "ALL:!aNULL:!eNULL:!LOW:!EXP:!MD5:@STRENGTH"
/* This list of ciphers is for speed and compatibility, not security. Any cipher
* is accepted, and the list is sorted by speed based on Brian Hatch's