Mercurial > prosody-hg

comparison core/certmanager.lua @ 5872:1c3ebd3009fe

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
certmanager: Add back single_dh_use and single_ecdh_use to default options (Zash breaks, Zash unbreaks)
author Kim Alvefur <zash@zash.se>
date Tue, 15 Oct 2013 01:37:16 +0200
parents 970c666c5586
children 3321a4b3e6c4
comparison
equal deleted inserted replaced
5871:e80916ce8d32 5872:1c3ebd3009fe
51 for i=1,#core_defaults.verifyext do -- Remove lsec_ prefix 51 for i=1,#core_defaults.verifyext do -- Remove lsec_ prefix
52 core_defaults.verify[#core_defaults.verify+1] = core_defaults.verifyext[i]:sub(6); 52 core_defaults.verify[#core_defaults.verify+1] = core_defaults.verifyext[i]:sub(6);
53 end 53 end
54 end 54 end
55 55
56 if luasec_has_no_compression and configmanager.get("*", "ssl_compression") ~= true then 56 if luasec_has_no_compression then -- Has no_compression? Then it has these too...
57 core_defaults.options[#core_defaults.options+1] = "no_compression"; 57 default_options[#default_options+1] = "single_dh_use";
58 default_options[#default_options+1] = "single_ecdh_use";
59 if configmanager.get("*", "ssl_compression") ~= true then
60 core_defaults.options[#core_defaults.options+1] = "no_compression";
61 end
58 end 62 end
59 63
60 function create_context(host, mode, user_ssl_config) 64 function create_context(host, mode, user_ssl_config)
61 user_ssl_config = user_ssl_config or {} 65 user_ssl_config = user_ssl_config or {}
62 user_ssl_config.mode = mode; 66 user_ssl_config.mode = mode;