summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorgilles <gilles@openbsd.org>2016-09-02 09:43:54 +0000
committergilles <gilles@openbsd.org>2016-09-02 09:43:54 +0000
commitfb4f76971bb2865a0ef1874a369b67e005e6d8ee (patch)
tree91d8efef8fae1d12a19927b3e7cdf21eb234b402
parentDrop non-encapulated ESP packets using a UDP-encapsulating TDB, and add (diff)
downloadwireguard-openbsd-fb4f76971bb2865a0ef1874a369b67e005e6d8ee.tar.xz
wireguard-openbsd-fb4f76971bb2865a0ef1874a369b67e005e6d8ee.zip
turn server preference for ciphers on by default
ok jsing@
-rw-r--r--usr.sbin/smtpd/ssl.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/usr.sbin/smtpd/ssl.c b/usr.sbin/smtpd/ssl.c
index 1b06966d9fa..882a23283a2 100644
--- a/usr.sbin/smtpd/ssl.c
+++ b/usr.sbin/smtpd/ssl.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl.c,v 1.86 2016/04/21 14:27:41 jsing Exp $ */
+/* $OpenBSD: ssl.c,v 1.87 2016/09/02 09:43:54 gilles Exp $ */
/*
* Copyright (c) 2008 Pierre-Yves Ritschard <pyr@openbsd.org>
@@ -267,6 +267,7 @@ ssl_ctx_create(const char *pkiname, char *cert, off_t cert_len, const char *ciph
SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_NO_TICKET);
SSL_CTX_set_options(ctx,
SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION);
+ SSL_CTX_set_options(ctx, SSL_OP_CIPHER_SERVER_PREFERENCE);
if (ciphers == NULL)
ciphers = SSL_CIPHERS;