diff options
| author |   beck <beck@openbsd.org> | 2019-11-16 21:39:52 +0000 |
|---|---|---|
| committer | beck <beck@openbsd.org> | 2019-11-16 21:39:52 +0000 |
| commit | b10e6c9ec93b8c7542037eaa282bd53cf83b9e9e (patch) | |
| tree | 27e6964956e2e5bda1d65f3bba1ff9b56b6d864f /lib/libtls | |
| parent | Provide exact lock assertions for rwlocks when witness(4) is enabled. (diff) | |
| download | wireguard-openbsd-b10e6c9ec93b8c7542037eaa282bd53cf83b9e9e.tar.xz wireguard-openbsd-b10e6c9ec93b8c7542037eaa282bd53cf83b9e9e.zip | |
Allow 1.3 ciphers in libtls.
ok jsing@
Diffstat (limited to 'lib/libtls')
| -rw-r--r-- | lib/libtls/tls_internal.h | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/libtls/tls_internal.h b/lib/libtls/tls_internal.h index 3d806f8b6e0..1dd5f45dddb 100644 --- a/lib/libtls/tls_internal.h +++ b/lib/libtls/tls_internal.h @@ -1,4 +1,4 @@ -/* $OpenBSD: tls_internal.h,v 1.76 2019/11/16 06:44:33 beck Exp $ */ +/* $OpenBSD: tls_internal.h,v 1.77 2019/11/16 21:39:52 beck Exp $ */ /* * Copyright (c) 2014 Jeremie Courreges-Anglas <jca@openbsd.org> * Copyright (c) 2014 Joel Sing <jsing@openbsd.org> @@ -32,7 +32,7 @@ __BEGIN_HIDDEN_DECLS #define TLS_DEFAULT_CA_FILE "/etc/ssl/cert.pem" #endif -#define TLS_CIPHERS_DEFAULT "TLSv1.2+AEAD+ECDHE:TLSv1.2+AEAD+DHE" +#define TLS_CIPHERS_DEFAULT "TLSv1.3:TLSv1.2+AEAD+ECDHE:TLSv1.2+AEAD+DHE" #define TLS_CIPHERS_COMPAT "HIGH:!aNULL" #define TLS_CIPHERS_LEGACY "HIGH:MEDIUM:!aNULL" #define TLS_CIPHERS_ALL "ALL:!aNULL:!eNULL" |