X-Git-Url: http://git.code-monkey.de/?p=umurmur.git;a=blobdiff_plain;f=src%2Fssli_openssl.c;h=2dd55ef8839bfe334c717c896305416543b4608f;hp=bcd4d9e7897ea24005d76c6034de801772b9bc38;hb=c72ebd29f239793218f2248c3f8b48a7b3e0a541;hpb=dbf4a6828c7cdcf4c2d8f8535a76272847823809

diff --git a/src/ssli_openssl.c b/src/ssli_openssl.c
index bcd4d9e..2dd55ef 100644
--- a/src/ssli_openssl.c
+++ b/src/ssli_openssl.c
@@ -49,6 +49,8 @@ static RSA *rsa;
 static SSL_CTX *context;
 static EVP_PKEY *pkey;
 
+static char const * ciphers = "EECDH+AESGCM:AES256-SHA:AES128-SHA";
+
 static int verify_callback(int preverify_ok, X509_STORE_CTX *ctx);
 
 static int SSL_add_ext(X509 * crt, int nid, char *value) {
@@ -220,13 +222,19 @@ void SSLi_init(void)
 	SSL_load_error_strings();
 	ERR_load_crypto_strings();
 
-	context = SSL_CTX_new(SSLv23_server_method());
+	context = SSL_CTX_new(TLSv1_2_server_method());
 	if (context == NULL)
 	{
 		ERR_print_errors_fp(stderr);
 		abort();
 	}
 
+	SSL_CTX_set_cipher_list(context, ciphers);
+
+	EC_KEY *ecdhkey = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
+	SSL_CTX_set_tmp_ecdh(context, ecdhkey);
+	EC_KEY_free(ecdhkey);
+
 	char const * sslCAPath = getStrConf(CAPATH);
 	if(sslCAPath != NULL)
 	{