Daniel Stenberg 3b5c75ef3d OpenSSL: deselect weak ciphers by default ...

By default even recent versions of OpenSSL support and accept both
"export strength" ciphers, small-bitsize ciphers as well as downright
deprecated ones.

This change sets a default cipher set that avoids the worst ciphers, and
subsequently makes https://www.howsmyssl.com/a/check no longer grade
curl/OpenSSL connects as 'Bad'.

Bug: http://curl.haxx.se/bug/view.cgi?id=1323
Reported-by: Jeff Hodges

2014-01-12 00:14:01 +01:00

..

axtls.c

vtls: Updated comments referencing sslgen.c and ssluse.c

2013-12-26 21:42:22 +00:00

axtls.h

vtls: moved all TLS/SSL source and header files into subdir

2013-12-20 17:12:42 +01:00

curl_darwinssl.c

darwinssl: un-break Leopard build after PKCS#12 change

2014-01-09 17:53:29 -06:00

curl_darwinssl.h

vtls: moved all TLS/SSL source and header files into subdir

2013-12-20 17:12:42 +01:00

curl_schannel.c

vtls: Updated comments referencing sslgen.c and ssluse.c

2013-12-26 21:42:22 +00:00

curl_schannel.h

vtls: moved all TLS/SSL source and header files into subdir

2013-12-20 17:12:42 +01:00

cyassl.c

vtls: Updated comments referencing sslgen.c and ssluse.c

2013-12-26 21:42:22 +00:00

cyassl.h

vtls: moved all TLS/SSL source and header files into subdir

2013-12-20 17:12:42 +01:00

gskit.c

vtls: Fixed up include of vtls.h

2013-12-26 21:25:51 +00:00

gskit.h

vtls: Updated comments referencing sslgen.c and ssluse.c

2013-12-26 21:42:22 +00:00

gtls.c

vtls: Updated comments referencing sslgen.c and ssluse.c

2013-12-26 21:42:22 +00:00

gtls.h

vtls: moved all TLS/SSL source and header files into subdir

2013-12-20 17:12:42 +01:00

nss.c

vtls: Updated comments referencing sslgen.c and ssluse.c

2013-12-26 21:42:22 +00:00

nssg.h

vtls: Updated comments referencing sslgen.c and ssluse.c

2013-12-26 21:42:22 +00:00

openssl.c

OpenSSL: deselect weak ciphers by default

2014-01-12 00:14:01 +01:00

openssl.h

OpenSSL: deselect weak ciphers by default

2014-01-12 00:14:01 +01:00

polarssl_threadlock.c

vtls: moved all TLS/SSL source and header files into subdir

2013-12-20 17:12:42 +01:00

polarssl_threadlock.h

vtls: moved all TLS/SSL source and header files into subdir

2013-12-20 17:12:42 +01:00

polarssl.c

vtls: Updated comments referencing sslgen.c and ssluse.c

2013-12-26 21:42:22 +00:00

polarssl.h

vtls: moved all TLS/SSL source and header files into subdir

2013-12-20 17:12:42 +01:00

qssl.c

vtls: Fixed up include of vtls.h

2013-12-26 21:25:51 +00:00

qssl.h

vtls: Updated comments referencing sslgen.c and ssluse.c

2013-12-26 21:42:22 +00:00

vtls.c

vtls: renamed sslgen.[ch] to vtls.[ch]

2013-12-20 17:12:42 +01:00

vtls.h

vtls: renamed sslgen.[ch] to vtls.[ch]

2013-12-20 17:12:42 +01:00