I got a little too eager in removing old cruft from the TLS code. Not setting the...

[citadel.git] / citadel / modules / crypto / serv_crypto.h

diff --git a/citadel/modules/crypto/serv_crypto.h b/citadel/modules/crypto/serv_crypto.h
index f2c116157136d8e319f3c0ebd9adbbc0569d1314..4cef7e43b4b1a55bffcf60ccccf47fe3bd5cc053 100644 (file)
--- a/citadel/modules/crypto/serv_crypto.h
+++ b/citadel/modules/crypto/serv_crypto.h
@@ -4,7 +4,9 @@
  */
 #define SIGN_DAYS      1100    // Just over three years
 
-//#define CIT_CIPHERS  "ALL:RC4+RSA:+SSLv2:+TLSv1:!MD5:@STRENGTH"      /* see ciphers(1) */
+// Which ciphers will be offered; see https://www.openssl.org/docs/manmaster/man1/ciphers.html
+//#define CIT_CIPHERS  "ALL:RC4+RSA:+SSLv2:+TLSv1:!MD5:@STRENGTH"
+#define CIT_CIPHERS    "DEFAULT"
 
 #ifdef HAVE_OPENSSL
 #define OPENSSL_NO_KRB5                /* work around redhat b0rken ssl headers */