Revision 971bbd84 lib/constants.py

b/lib/constants.py
204 204 
# 2010 on.
205 205 
RSA_KEY_BITS = 2048
206 206 

  		





  
  207
  
    
# Ciphers allowed for SSL connections. For the format, see ciphers(1). A better


  		





  
  208
  
    
# way to disable ciphers would be to use the exclamation mark (!), but socat


  		





  
  209
  
    
# versions below 1.5 can't parse exclamation marks in options properly. When


  		





  
  210
  
    
# modifying the ciphers, ensure to not accidentially add something after it's


  		





  
  211
  
    
# been removed. Use the "openssl" utility to check the allowed ciphers, e.g.


  		





  
  212
  
    
# "openssl ciphers -v HIGH:-DES".


  		





  
  213
  
    
OPENSSL_CIPHERS = "HIGH:-DES:-3DES:-EXPORT:-ADH"


  		





  
  214
  
    

  		





  207
  215
  
    
# Digest used to sign certificates ("openssl x509" uses SHA1 by default)


  		





  208
  216
  
    
X509_CERT_SIGN_DIGEST = "SHA1"


  		





  209
  217
  
    

  		












Also available in:
  Unified diff