Update "CipherList" to not enable SSLv3 by default

[ngircd-alex.git] / doc / sample-ngircd.conf.tmpl

diff --git a/doc/sample-ngircd.conf.tmpl b/doc/sample-ngircd.conf.tmpl
index 1d07822c5b405e748af8da30f13c397837afa8fc..b5db1d9e1edffa5af2070dfc27bf9fa990590ce6 100644 (file)
--- a/doc/sample-ngircd.conf.tmpl
+++ b/doc/sample-ngircd.conf.tmpl
@@ -259,9 +259,9 @@
        # See 'man 1ssl ciphers' (OpenSSL) or 'man 3 gnutls_priority_init'
        # (GnuTLS) for details.
        # For OpenSSL:
-       ;CipherList = HIGH:!aNULL:@STRENGTH
+       ;CipherList = HIGH:!aNULL:@STRENGTH:!SSLv3
        # For GnuTLS:
-       ;CipherList = SECURE128
+       ;CipherList = SECURE128:-VERS-SSL3.0
 
        # Diffie-Hellman parameters
        ;DHFile = :ETCDIR:/ssl/dhparams.pem