diff options
| author | Anton <anton@picapica> | 2018-07-28 19:56:52 +0400 |
|---|---|---|
| committer | Anton <anton@picapica> | 2018-07-28 19:56:52 +0400 |
| commit | d240ed3e88dbb164d36a8007939b4ab7913f8435 (patch) | |
| tree | 30d8b8dd7e306ab6928e3cfb158c19c34b7cf11b /PICA_client.c | |
| parent | fd9f68b50ef480f84bda3910e6e2a064eeaaee51 (diff) | |
| download | pica-pica-d240ed3e88dbb164d36a8007939b4ab7913f8435.tar.gz pica-pica-d240ed3e88dbb164d36a8007939b4ab7913f8435.zip | |
add header file PICA_security.h to group important security parameters in one place
Diffstat (limited to 'PICA_client.c')
| -rw-r--r-- | PICA_client.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/PICA_client.c b/PICA_client.c index 3829f49..9f25e0c 100644 --- a/PICA_client.c +++ b/PICA_client.c @@ -15,6 +15,7 @@ You should have received a copy of the GNU General Public License along with this program. If not, see <https://www.gnu.org/licenses/>. */ +#include "PICA_security.h" #include "PICA_client.h" #include "PICA_proto.h" #include "PICA_msgproc.h" @@ -1375,6 +1376,10 @@ int PICA_open_acc(const char *cert_file, goto error_ret_1; } + /* Available since openssl 1.1.0 + SSL_CTX_set_security_level(a->ctx, PICA_OPENSSL_SECURUTY_LEVEL); + */ + dh_file = fopen(dh_param_file, "r"); if (dh_file) @@ -1430,7 +1435,7 @@ int PICA_open_acc(const char *cert_file, goto error_ret_2; } - ret = SSL_CTX_set_cipher_list(a->ctx, "DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CAMELLIA256-SHA"); + ret = SSL_CTX_set_cipher_list(a->ctx, PICA_TLS_CIPHERLIST); if (ret != 1) { |