summaryrefslogtreecommitdiff
path: root/src/lib/libtls/tls_internal.h
diff options
context:
space:
mode:
authorjsing <>2018-11-06 20:34:54 +0000
committerjsing <>2018-11-06 20:34:54 +0000
commitdb941a1cfe2e8232c86adf98026bc75fdcce8760 (patch)
tree904f13b7efbaf987abda0a6dc30c16f43ec640f0 /src/lib/libtls/tls_internal.h
parent787819c8956c948e042a0e279bdb1f9a95862f33 (diff)
downloadopenbsd-db941a1cfe2e8232c86adf98026bc75fdcce8760.tar.gz
openbsd-db941a1cfe2e8232c86adf98026bc75fdcce8760.tar.bz2
openbsd-db941a1cfe2e8232c86adf98026bc75fdcce8760.zip
Define TLS_CA_CERT_FILE rather than having every application create their
own define for /etc/ssl/cert.pem. ok beck@ bluhm@ tb@
Diffstat (limited to '')
-rw-r--r--src/lib/libtls/tls_internal.h4
1 files changed, 1 insertions, 3 deletions
diff --git a/src/lib/libtls/tls_internal.h b/src/lib/libtls/tls_internal.h
index b236204e81..e1a858d4de 100644
--- a/src/lib/libtls/tls_internal.h
+++ b/src/lib/libtls/tls_internal.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: tls_internal.h,v 1.72 2018/04/07 16:35:34 jsing Exp $ */ 1/* $OpenBSD: tls_internal.h,v 1.73 2018/11/06 20:34:54 jsing Exp $ */
2/* 2/*
3 * Copyright (c) 2014 Jeremie Courreges-Anglas <jca@openbsd.org> 3 * Copyright (c) 2014 Jeremie Courreges-Anglas <jca@openbsd.org>
4 * Copyright (c) 2014 Joel Sing <jsing@openbsd.org> 4 * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
@@ -26,8 +26,6 @@
26 26
27__BEGIN_HIDDEN_DECLS 27__BEGIN_HIDDEN_DECLS
28 28
29#define _PATH_SSL_CA_FILE "/etc/ssl/cert.pem"
30
31#define TLS_CIPHERS_DEFAULT "TLSv1.2+AEAD+ECDHE:TLSv1.2+AEAD+DHE" 29#define TLS_CIPHERS_DEFAULT "TLSv1.2+AEAD+ECDHE:TLSv1.2+AEAD+DHE"
32#define TLS_CIPHERS_COMPAT "HIGH:!aNULL" 30#define TLS_CIPHERS_COMPAT "HIGH:!aNULL"
33#define TLS_CIPHERS_LEGACY "HIGH:MEDIUM:!aNULL" 31#define TLS_CIPHERS_LEGACY "HIGH:MEDIUM:!aNULL"