summaryrefslogtreecommitdiffstats
path: root/qmail-smtpd.c
diff options
context:
space:
mode:
Diffstat (limited to 'qmail-smtpd.c')
-rw-r--r--qmail-smtpd.c5
1 files changed, 3 insertions, 2 deletions
diff --git a/qmail-smtpd.c b/qmail-smtpd.c
index 5b862a0..d5be4af 100644
--- a/qmail-smtpd.c
+++ b/qmail-smtpd.c
@@ -1432,8 +1432,9 @@ void tls_init()
1432 /* a new SSL context with the bare minimum of options */ 1432 /* a new SSL context with the bare minimum of options */
1433 ctx = SSL_CTX_new(SSLv23_server_method()); 1433 ctx = SSL_CTX_new(SSLv23_server_method());
1434 if (!ctx) { tls_err("unable to initialize ctx"); return; } 1434 if (!ctx) { tls_err("unable to initialize ctx"); return; }
1435 SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | 1435 SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv3 |
1436 SSL_OP_CIPHER_SERVER_PREFERENCE); 1436 SSL_OP_CIPHER_SERVER_PREFERENCE |
1437 SSL_OP_PRIORITIZE_CHACHA);
1437 1438
1438 if (!SSL_CTX_use_certificate_chain_file(ctx, servercert)) 1439 if (!SSL_CTX_use_certificate_chain_file(ctx, servercert))
1439 { SSL_CTX_free(ctx); tls_err("missing certificate"); return; } 1440 { SSL_CTX_free(ctx); tls_err("missing certificate"); return; }