mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-04 13:47:41 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

core.certmanager: Set a default curveslist [sic], fixes #879, #943, #951 if used along with luasec 0.7 and openssl 1.1

Browse source
This commit is contained in:
Kim Alvefur 2017-09-27 15:45:07 +02:00
parent 8ae2b88fa0
commit e1a94acbb9
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
core/certmanager.lua
View file

@ -107,6 +107,12 @@ local core_defaults = {
}; };
verifyext = { "lsec_continue", "lsec_ignore_purpose" }; verifyext = { "lsec_continue", "lsec_ignore_purpose" };
curve = "secp384r1"; curve = "secp384r1";
curveslist = {
"X25519",
"P-384",
"P-256",
"P-521",
};
ciphers = { -- Enabled ciphers in order of preference: ciphers = { -- Enabled ciphers in order of preference:
"HIGH+kEDH", -- Ephemeral Diffie-Hellman key exchange, if a 'dhparam' file is set "HIGH+kEDH", -- Ephemeral Diffie-Hellman key exchange, if a 'dhparam' file is set
"HIGH+kEECDH", -- Ephemeral Elliptic curve Diffie-Hellman key exchange "HIGH+kEECDH", -- Ephemeral Elliptic curve Diffie-Hellman key exchange