CVSROOT: /cvs Module name: src Changes by: [email protected] 2016/07/13 10:30:48
Modified files:
lib/libtls : tls_config.c tls_init.3 tls_internal.h
Log message:
Split the existing TLS cipher suite groups into four:
"secure" (TLSv1.2+AEAD+PFS)
"compat" (HIGH:!aNULL)
"legacy" (HIGH:MEDIUM:!aNULL)
"insecure" (ALL:!aNULL:!eNULL)
This allows for flexibility and finer grained control, rather than having
two extremes (an issue raised by Marko Kreen some time ago).
ok beck@ tedu@
