GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 16:57:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

do not enforce PFS on default strings

Browse Source 
That allows legacy clients connect.
This commit is contained in:
Nikos Mavrogiannopoulos
2015-01-11 12:22:25 +01:00
parent c3417f0830
commit 2f3d520c85
2 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
doc/sample.config
View File

@@ -143,7 +143,8 @@ server-key = ../tests/server-key.pem
# as there are no openconnect (and possibly anyconnect clients) using
# that protocol. The default string below enforces perfect forward secrecy (PFS)
# on the main channel.
tls-priorities = "NORMAL:%SERVER_PRECEDENCE:%COMPAT:-RSA:-VERS-SSL3.0:-ARCFOUR-128"
tls-priorities = "NORMAL:%SERVER_PRECEDENCE:%COMPAT:-VERS-SSL3.0:-ARCFOUR-128"
#tls-priorities = "NORMAL:%SERVER_PRECEDENCE:%COMPAT:-RSA:-VERS-SSL3.0:-ARCFOUR-128"
# More combinations in priority strings are available, check
# http://gnutls.org/manual/html_node/Priority-Strings.html