X-Git-Url: http://git.code-monkey.de/?a=blobdiff_plain;f=src%2Fssli_gnutls.c;h=938678697fadf8b9ee753f0a2101b2c0a23ee625;hb=cb1c5a3fb9bd38f05601b93d1ddc35b828a270de;hp=95e96a5a9df3234b51ed30bc1f2e96d2b5b49911;hpb=df93d4e9a7be423740ca2f050ebc5b1492405e8d;p=umurmur.git

diff --git a/src/ssli_gnutls.c b/src/ssli_gnutls.c
index 95e96a5..9386786 100644
--- a/src/ssli_gnutls.c
+++ b/src/ssli_gnutls.c
@@ -1,10 +1,14 @@
 #include "ssl.h"
 #include "conf.h"
+#include "log.h"
 
 static gnutls_dh_params_t dhParameters;
-static gnutls_certificate_credentials certificate;
+static gnutls_certificate_credentials_t certificate;
 
-void initiliazeCertificate()
+static const char * ciphers = "SECURE128:-VERS-DTLS-ALL:-VERS-SSL3.0:-VERS-TLS1.0:+COMP_ALL";
+static gnutls_priority_t cipherCache;
+
+void initializeCertificate()
   {
   char* certificatePath = (char*) getStrConf(CERTIFICATE);
 
@@ -39,9 +43,16 @@ void SSLi_init()
   gnutls_global_init();
 #endif
 
+  gnutls_priority_init(&cipherCache, ciphers, NULL);
+
   initializeCertificate();
 
   Log_info("Sucessfully initialized GNUTLS version %s", gnutls_check_version(NULL));
 
   }
 
+void SSLi_deinit()
+  {
+  gnutls_certificate_free_credentials(certificate);
+  gnutls_global_deinit();
+  }