Commit 80ec9c99 authored by Moritz Grimm's avatar Moritz Grimm
Browse files

Fix and simplify example cipher string

parent b9c2a3a7
......@@ -232,8 +232,8 @@ active attackers.
.It Sy \&<tls_cipher_suite\ /\&>
Configure allowed cipher suites for TLS.
.Pp
For example (modern cipher suites, PFS, no deprecated algorithms):
.Sy HIGH:!kRSA:!kECDH:!DH:!PKS:!aNULL:!eNULL:!3DES:!MD5:!SHA:!TLSv1 .
For example (modern cipher suites, PFS, TLS 1.2 or better):
.Sy HIGH:!RSA:!SHA:!DH:!aNULL:!eNULL:!TLSv1 .
.Pp
Default:
.Em libshout default cipher suite
......
......@@ -45,7 +45,7 @@
Configure allowed cipher suites for TLS other than the libshout default.
See openssl(1)/ciphers(1) for details.
-->
<tls_cipher_suite>HIGH:!kRSA:!kECDH:!DH:!PKS:!aNULL:!eNULL:!3DES:!MD5:!SHA:!TLSv1</tls_cipher_suite>
<tls_cipher_suite>HIGH:!RSA:!SHA:!DH:!aNULL:!eNULL:!TLSv1</tls_cipher_suite>
<!--
Directory to use for server certificate verification in "hash format".
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment