| Patrick Williams | b48b7b4 | 2016-08-17 15:04:38 -0500 | [diff] [blame^] | 1 | diff -up sblim-sfcb-1.4.8/control.c.orig sblim-sfcb-1.4.8/control.c |
| 2 | --- sblim-sfcb-1.4.8/control.c.orig 2014-03-27 00:46:28.000000000 +0100 |
| 3 | +++ sblim-sfcb-1.4.8/control.c 2014-05-15 12:31:38.304169409 +0200 |
| 4 | @@ -170,7 +170,7 @@ static Control init[] = { |
| 5 | {"sslCertList", CTL_STRING, SFCB_CONFDIR "/clist.pem", {0}}, |
| 6 | {"sslCiphers", CTL_STRING, "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH", {0}}, |
| 7 | {"sslDhParamsFilePath", CTL_STRING, NULL, {0}}, |
| 8 | - {"sslEcDhCurveName", CTL_STRING, "secp224r1", {0}}, |
| 9 | + {"sslEcDhCurveName", CTL_STRING, "secp384r1", {0}}, |
| 10 | {"enableSslCipherServerPref", CTL_BOOL, NULL, {.b=0}}, |
| 11 | |
| 12 | {"registrationDir", CTL_STRING, SFCB_STATEDIR "/registration", {0}}, |
| 13 | diff -up sblim-sfcb-1.4.8/sfcb.cfg.pre.in.orig sblim-sfcb-1.4.8/sfcb.cfg.pre.in |
| 14 | --- sblim-sfcb-1.4.8/sfcb.cfg.pre.in.orig 2014-05-15 12:31:59.188244865 +0200 |
| 15 | +++ sblim-sfcb-1.4.8/sfcb.cfg.pre.in 2014-05-15 12:32:45.554408412 +0200 |
| 16 | @@ -293,8 +293,8 @@ sslCiphers: ALL:!ADH:!LOW:!EXP:!MD5:@STR |
| 17 | ## environment. If this value is not set, the indicated default is in effect. |
| 18 | ## If the value is set but the curve name is not recognized by the underlying |
| 19 | ## openssl implementation, SFCB will abort. |
| 20 | -## Default is secp224r1 |
| 21 | -#sslEcDhCurveName: secp224r1 |
| 22 | +## Default is secp384r1 |
| 23 | +#sslEcDhCurveName: secp384r1 |
| 24 | |
| 25 | ## When set to true, sets the SSL_OP_CIPHER_SERVER_PREFERENCE flag for the ssl |
| 26 | ## context, to enforce server's preference instead of the client preference for |