• Show log

    Commit

  • Hash : f0f97370
    Author : Carlos Martín Nieto
    Date : 2014-10-18T15:52:10

    ssl: dump the SSL ciphers in favour of TLS
    
    All versions of SSL are considered deprecated now, so let's ask OpenSSl
    to only use TLSv1. We still ask it to load those ciphers for
    compatibility with servers which want to use an older hello but will use
    TLS for encryption.
    
    For good measure we also disable compression, which can be exploitable,
    if the OpenSSL version supports it.