summaryrefslogtreecommitdiffstats
path: root/base/common
diff options
context:
space:
mode:
authorEndi S. Dewata <edewata@redhat.com>2017-03-19 21:47:08 +0100
committerEndi S. Dewata <edewata@redhat.com>2017-03-19 22:43:32 +0100
commitde4b48b9e4523a865e74f8122e130e976b124410 (patch)
tree1b6b8a601148adef669fc9d3ea7c5209c38a9dbf /base/common
parenta0fde2d91a02c4d11b698582a2cd64a76765ed25 (diff)
downloadpki-de4b48b9e4523a865e74f8122e130e976b124410.tar.gz
pki-de4b48b9e4523a865e74f8122e130e976b124410.tar.xz
pki-de4b48b9e4523a865e74f8122e130e976b124410.zip
Added pki.conf parameter for default SSL ciphers.
A new parameter has been added to pki.conf to enable/disable the default SSL ciphers for PKI CLI.
Diffstat (limited to 'base/common')
-rw-r--r--base/common/share/etc/pki.conf5
1 files changed, 5 insertions, 0 deletions
diff --git a/base/common/share/etc/pki.conf b/base/common/share/etc/pki.conf
index e6d53714d..9f4df6371 100644
--- a/base/common/share/etc/pki.conf
+++ b/base/common/share/etc/pki.conf
@@ -32,6 +32,11 @@ export SSL_DATAGRAM_VERSION_MIN
SSL_DATAGRAM_VERSION_MAX="TLS_1_2"
export SSL_DATAGRAM_VERSION_MAX
+# SSL default ciphers
+# This boolean parameter determines whether to enable default SSL ciphers.
+SSL_DEFAULT_CIPHERS="true"
+export SSL_DEFAULT_CIPHERS
+
# SSL ciphers
# This parameter lists SSL ciphers to enable in addition to the default ciphers.
# The list contains IANA-registered cipher names separated by white spaces.