diff options
| author | Endi S. Dewata <edewata@redhat.com> | 2017-03-19 21:47:08 +0100 |
|---|---|---|
| committer | Endi S. Dewata <edewata@redhat.com> | 2017-03-19 22:43:32 +0100 |
| commit | de4b48b9e4523a865e74f8122e130e976b124410 (patch) | |
| tree | 1b6b8a601148adef669fc9d3ea7c5209c38a9dbf /base/java-tools/src/com | |
| parent | a0fde2d91a02c4d11b698582a2cd64a76765ed25 (diff) | |
| download | pki-de4b48b9e4523a865e74f8122e130e976b124410.tar.gz pki-de4b48b9e4523a865e74f8122e130e976b124410.tar.xz pki-de4b48b9e4523a865e74f8122e130e976b124410.zip | |
Added pki.conf parameter for default SSL ciphers.
A new parameter has been added to pki.conf to enable/disable the
default SSL ciphers for PKI CLI.
Diffstat (limited to 'base/java-tools/src/com')
| -rw-r--r-- | base/java-tools/src/com/netscape/cmstools/cli/MainCLI.java | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/base/java-tools/src/com/netscape/cmstools/cli/MainCLI.java b/base/java-tools/src/com/netscape/cmstools/cli/MainCLI.java index 053d72c4e..83090a108 100644 --- a/base/java-tools/src/com/netscape/cmstools/cli/MainCLI.java +++ b/base/java-tools/src/com/netscape/cmstools/cli/MainCLI.java @@ -537,7 +537,12 @@ public class MainCLI extends CLI { SSLVersion.valueOf(datagramVersionMax) ); - CryptoUtil.setDefaultSSLCiphers(); + String defaultCiphers = System.getenv("SSL_DEFAULT_CIPHERS"); + if (Boolean.parseBoolean(defaultCiphers)) { + CryptoUtil.setDefaultSSLCiphers(); + } else { + CryptoUtil.unsetSSLCiphers(); + } String ciphers = System.getenv("SSL_CIPHERS"); CryptoUtil.setSSLCiphers(ciphers); |