summaryrefslogtreecommitdiff
path: root/src/lib/libtls/tls_internal.h
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/libtls/tls_internal.h')
-rw-r--r--src/lib/libtls/tls_internal.h6
1 files changed, 5 insertions, 1 deletions
diff --git a/src/lib/libtls/tls_internal.h b/src/lib/libtls/tls_internal.h
index efccc9fdbe..3d806f8b6e 100644
--- a/src/lib/libtls/tls_internal.h
+++ b/src/lib/libtls/tls_internal.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: tls_internal.h,v 1.75 2019/11/02 13:37:59 jsing Exp $ */ 1/* $OpenBSD: tls_internal.h,v 1.76 2019/11/16 06:44:33 beck Exp $ */
2/* 2/*
3 * Copyright (c) 2014 Jeremie Courreges-Anglas <jca@openbsd.org> 3 * Copyright (c) 2014 Jeremie Courreges-Anglas <jca@openbsd.org>
4 * Copyright (c) 2014 Joel Sing <jsing@openbsd.org> 4 * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
@@ -28,6 +28,10 @@
28 28
29__BEGIN_HIDDEN_DECLS 29__BEGIN_HIDDEN_DECLS
30 30
31#ifndef TLS_DEFAULT_CA_FILE
32#define TLS_DEFAULT_CA_FILE "/etc/ssl/cert.pem"
33#endif
34
31#define TLS_CIPHERS_DEFAULT "TLSv1.2+AEAD+ECDHE:TLSv1.2+AEAD+DHE" 35#define TLS_CIPHERS_DEFAULT "TLSv1.2+AEAD+ECDHE:TLSv1.2+AEAD+DHE"
32#define TLS_CIPHERS_COMPAT "HIGH:!aNULL" 36#define TLS_CIPHERS_COMPAT "HIGH:!aNULL"
33#define TLS_CIPHERS_LEGACY "HIGH:MEDIUM:!aNULL" 37#define TLS_CIPHERS_LEGACY "HIGH:MEDIUM:!aNULL"