Added the http.cipherfilter config directive to specify the cipherlist filter string.
The provided cipherlist filter string will be used when initializing the SSL context.

If the config misses the cipher filter directive, the following default is assumed: "ALL:!LOW:!EXP:!MD5:!MD2"

If the config specifies the directive, but no string or an invalid string is provided, initialization fails with an error message.

The goal is to make it easier to modify the list of permitted ciphers used by the XrdHttp component.

You can view, comment on, or merge this pull request online at:

  https://github.com/xrootd/xrootd/pull/678

Commit Summary

File Changes

Patch Links:

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/xrootd/xrootd","title":"xrootd/xrootd","subtitle":"GitHub repository","main_image_url":"https://cloud.githubusercontent.com/assets/143418/17495839/a5054eac-5d88-11e6-95fc-7290892c7bb5.png","avatar_image_url":"https://cloud.githubusercontent.com/assets/143418/15842166/7c72db34-2c0b-11e6-9aed-b52498112777.png","action":{"name":"Open in GitHub","url":"https://github.com/xrootd/xrootd"}},"updates":{"snippets":[{"icon":"DESCRIPTION","message":"Added XrdHttp cipherlist filter string config option (#678)"}],"action":{"name":"View Pull Request","url":"https://github.com/xrootd/xrootd/pull/678"}}}

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1