diff options
| author |   jsing <jsing@openbsd.org> | 2015-02-22 14:55:40 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2015-02-22 14:55:40 +0000 |
| commit | c7dffc0b36ed0d33661b476790058b3a171f77cc (patch) | |
| tree | 2444e314f0347768eed23ce29c433956c0772762 /usr.sbin/syslogd/syslogd.c | |
| parent | In the interests of being secure by default, make the default TLS ciphers (diff) | |
| download | wireguard-openbsd-c7dffc0b36ed0d33661b476790058b3a171f77cc.tar.xz wireguard-openbsd-c7dffc0b36ed0d33661b476790058b3a171f77cc.zip | |
Set the TLS ciphers to "compat" mode, restoring the previous behaviour.
Diffstat (limited to 'usr.sbin/syslogd/syslogd.c')
| -rw-r--r-- | usr.sbin/syslogd/syslogd.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/usr.sbin/syslogd/syslogd.c b/usr.sbin/syslogd/syslogd.c index d381c1402bd..cb63f8e0dc8 100644 --- a/usr.sbin/syslogd/syslogd.c +++ b/usr.sbin/syslogd/syslogd.c @@ -1,4 +1,4 @@ -/* $OpenBSD: syslogd.c,v 1.157 2015/02/20 00:56:32 bluhm Exp $ */ +/* $OpenBSD: syslogd.c,v 1.158 2015/02/22 14:55:41 jsing Exp $ */ /* * Copyright (c) 1983, 1988, 1993, 1994 @@ -545,8 +545,11 @@ main(int argc, char *argv[]) free(p); close(fd); } - if (tlsconfig) + if (tlsconfig) { tls_config_set_protocols(tlsconfig, TLS_PROTOCOLS_ALL); + if (tls_config_set_ciphers(tlsconfig, "compat") != 0) + logerror("tls set ciphers"); + } dprintf("off & running....\n"); |