From 82c676b5be9ffc23208560c8d25471f38bc77b06 Mon Sep 17 00:00:00 2001
From: jsing <>
Date: Wed, 13 Jul 2016 16:35:47 +0000
Subject: Adjust existing tls_config_set_cipher() callers for TLS cipher group
 changes - map the previous configuration to the equivalent in the new groups.
 This will be revisited post release.

Discussed with beck@
---
 src/usr.bin/nc/netcat.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/usr.bin/nc')

diff --git a/src/usr.bin/nc/netcat.c b/src/usr.bin/nc/netcat.c
index e3f6074ab4..72c56a60d9 100644
--- a/src/usr.bin/nc/netcat.c
+++ b/src/usr.bin/nc/netcat.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: netcat.c,v 1.159 2016/07/07 14:09:44 jsing Exp $ */
+/* $OpenBSD: netcat.c,v 1.160 2016/07/13 16:35:47 jsing Exp $ */
 /*
  * Copyright (c) 2001 Eric Jackson <ericj@monkey.org>
  * Copyright (c) 2015 Bob Beck.  All rights reserved.
@@ -469,7 +469,7 @@ main(int argc, char *argv[])
 			errx(1, "unable to set TLS key file %s", Kflag);
 		if (TLSopt & TLS_LEGACY) {
 			tls_config_set_protocols(tls_cfg, TLS_PROTOCOLS_ALL);
-			tls_config_set_ciphers(tls_cfg, "legacy");
+			tls_config_set_ciphers(tls_cfg, "all");
 		}
 		if (!lflag && (TLSopt & TLS_CCERT))
 			errx(1, "clientcert is only valid with -l");
-- 
cgit v1.2.3-55-g6feb