ouch/inspircd
2
0
Fork 0
mirror of https://github.com/inspircd/inspircd.git synced 2025-03-11 11:39:02 -04:00
Code Issues Packages Projects Releases Wiki Activity

m_ssl_openssl Use the system default cipher list if no cipher list is specifed

Browse Source
This commit is contained in:
attilamolnar 2012-07-13 21:32:41 +02:00
parent 74ee9af966
commit 73a4a37376
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/modules/extra/m_ssl_openssl.cpp
View File

@ -198,13 +198,16 @@ class ModuleSSLOpenSSL : public Module
throw ModuleException("Unknown hash type " + hash); throw ModuleException("Unknown hash type " + hash);
use_sha = (hash == "sha1"); use_sha = (hash == "sha1");
std::string ciphers = conf->getString("ciphers", "ALL"); std::string ciphers = conf->getString("ciphers", "");
if ((!SSL_CTX_set_cipher_list(ctx, ciphers.c_str())) || (!SSL_CTX_set_cipher_list(clictx, ciphers.c_str())))
{
ServerInstance->Logs->Log("m_ssl_openssl",DEFAULT, "m_ssl_openssl.so: Can't set cipher list to %s.", ciphers.c_str());
ERR_print_errors_cb(error_callback, this);
}
if (!ciphers.empty())
{
if ((!SSL_CTX_set_cipher_list(ctx, ciphers.c_str())) || (!SSL_CTX_set_cipher_list(clictx, ciphers.c_str())))
{
ServerInstance->Logs->Log("m_ssl_openssl",DEFAULT, "m_ssl_openssl.so: Can't set cipher list to %s.", ciphers.c_str());
ERR_print_errors_cb(error_callback, this);
}
}
/* Load our keys and certificates /* Load our keys and certificates
* NOTE: OpenSSL's error logging API sucks, don't blame us for this clusterfuck. * NOTE: OpenSSL's error logging API sucks, don't blame us for this clusterfuck.