X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?a=blobdiff_plain;ds=sidebyside;f=doc%2Fsample-ngircd.conf.tmpl;h=1bdf01ee4f2b7309ec864ea75a389694b368e352;hb=b9006acee3649600226652a8361f13c859726cf2;hp=ae1b213950b8484ed4ab0ac92e9c9c03d86cea47;hpb=2bacb8210b4f0807eb50587bcc4329c7ea7a50c3;p=ngircd-alex.git

diff --git a/doc/sample-ngircd.conf.tmpl b/doc/sample-ngircd.conf.tmpl
index ae1b2139..1bdf01ee 100644
--- a/doc/sample-ngircd.conf.tmpl
+++ b/doc/sample-ngircd.conf.tmpl
@@ -248,6 +248,17 @@
 	# SSL Server Key Certificate
 	;CertFile = :ETCDIR:/ssl/server-cert.pem
 
+	# Select cipher suites allowed for SSL/TLS connections. This defaults
+	# to the empty string, so all supported ciphers are allowed. Please
+	# see 'man 1ssl ciphers' (OpenSSL) and 'man 3 gnutls_priority_init'
+	# (GnuTLS) for details.
+	# For example, this setting allows only "high strength" cipher suites,
+	# disables the ones without authentication, and sorts by strength:
+	# For OpenSSL:
+	;CipherList = HIGH:!aNULL:@STRENGTH
+	# For GnuTLS:
+	;CipherList = SECURE128
+
 	# Diffie-Hellman parameters
 	;DHFile = :ETCDIR:/ssl/dhparams.pem