CVSROOT: /cvs
Module name: src
Changes by: r...@cvs.openbsd.org 2014/07/11 10:59:38
Modified files:
usr.sbin/relayd: config.c parse.y relay.c relayd.conf.5 relayd.h
Log message:
Add support for EDH to provide perfect forward secrecy for older SSL
clients. Additionally, add options for disallowing client-initiated
renegotiations and to prefer the server's cipher list over the
client's preferences.
This work is based on a diff by Markus Gebert at hostpoint.ch, and was
discussed with jsing@ resulting in a few different defaults.
ok benno@
