Update "CipherList" to not enable SSLv3 by default

[ngircd-alex.git] / src / ngircd / conf.c

diff --git a/src/ngircd/conf.c b/src/ngircd/conf.c
index 6692ecbbdd8b5f8bb21f981fec5981acfb21e3a9..5f8c392976d2c377e4d35e6799ec81936916c4b4 100644 (file)
--- a/src/ngircd/conf.c
+++ b/src/ngircd/conf.c
@@ -88,10 +88,10 @@ static void Init_Server_Struct PARAMS(( CONF_SERVER *Server ));
 #endif
 
 #ifdef HAVE_LIBSSL
 #endif
 
 #ifdef HAVE_LIBSSL

-#define DEFAULT_CIPHERS                "HIGH:!aNULL:@STRENGTH"
+#define DEFAULT_CIPHERS                "HIGH:!aNULL:@STRENGTH:!SSLv3"

 #endif
 #ifdef HAVE_LIBGNUTLS
 #endif
 #ifdef HAVE_LIBGNUTLS

-#define DEFAULT_CIPHERS                "SECURE128"
+#define DEFAULT_CIPHERS                "SECURE128:-VERS-SSL3.0"

 #endif
 
 #ifdef SSL_SUPPORT
 #endif
 
 #ifdef SSL_SUPPORT