From 6ce418f63ceeda3d02246c6044c969d5f8f08b26 Mon Sep 17 00:00:00 2001 From: manuel Date: Mon, 17 Sep 2018 18:01:21 +0200 Subject: Enable PRIORITIZE_CHACHA per default --- qmail-smtpd.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'qmail-smtpd.c') diff --git a/qmail-smtpd.c b/qmail-smtpd.c index 5b862a0..d5be4af 100644 --- a/qmail-smtpd.c +++ b/qmail-smtpd.c @@ -1432,8 +1432,9 @@ void tls_init() /* a new SSL context with the bare minimum of options */ ctx = SSL_CTX_new(SSLv23_server_method()); if (!ctx) { tls_err("unable to initialize ctx"); return; } - SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | - SSL_OP_CIPHER_SERVER_PREFERENCE); + SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv3 | + SSL_OP_CIPHER_SERVER_PREFERENCE | + SSL_OP_PRIORITIZE_CHACHA); if (!SSL_CTX_use_certificate_chain_file(ctx, servercert)) { SSL_CTX_free(ctx); tls_err("missing certificate"); return; } -- cgit v1.2.3