diff options
author | Daniel Stenberg <daniel@haxx.se> | 2014-01-11 00:05:19 +0100 |
---|---|---|
committer | Daniel Stenberg <daniel@haxx.se> | 2014-01-12 00:14:01 +0100 |
commit | 3b5c75ef3d609584daef44ebbf2a592a966cbd6b (patch) | |
tree | 908853486ced794876df28a799fc151047cc68bf /docs/libcurl/curl_global_cleanup.3 | |
parent | 3b183df9cc781b329ca409ded1ea336530624715 (diff) |
OpenSSL: deselect weak ciphers by default
By default even recent versions of OpenSSL support and accept both
"export strength" ciphers, small-bitsize ciphers as well as downright
deprecated ones.
This change sets a default cipher set that avoids the worst ciphers, and
subsequently makes https://www.howsmyssl.com/a/check no longer grade
curl/OpenSSL connects as 'Bad'.
Bug: http://curl.haxx.se/bug/view.cgi?id=1323
Reported-by: Jeff Hodges
Diffstat (limited to 'docs/libcurl/curl_global_cleanup.3')
0 files changed, 0 insertions, 0 deletions