From d240ed3e88dbb164d36a8007939b4ab7913f8435 Mon Sep 17 00:00:00 2001
From: Anton <anton@picapica>
Date: Sat, 28 Jul 2018 19:56:52 +0400
Subject: add header file PICA_security.h to group important security
 parameters in one place

---
 PICA_client.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'PICA_client.c')

diff --git a/PICA_client.c b/PICA_client.c
index 3829f49..9f25e0c 100644
--- a/PICA_client.c
+++ b/PICA_client.c
@@ -15,6 +15,7 @@
 	You should have received a copy of the GNU General Public License
 	along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */
+#include "PICA_security.h"
 #include "PICA_client.h"
 #include "PICA_proto.h"
 #include "PICA_msgproc.h"
@@ -1375,6 +1376,10 @@ int PICA_open_acc(const char *cert_file,
 		goto error_ret_1;
 	}
 
+	/* Available since openssl 1.1.0
+	SSL_CTX_set_security_level(a->ctx, PICA_OPENSSL_SECURUTY_LEVEL);
+	*/
+
 	dh_file = fopen(dh_param_file, "r");
 
 	if (dh_file)
@@ -1430,7 +1435,7 @@ int PICA_open_acc(const char *cert_file,
 		goto error_ret_2;
 	}
 
-	ret = SSL_CTX_set_cipher_list(a->ctx, "DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CAMELLIA256-SHA");
+	ret = SSL_CTX_set_cipher_list(a->ctx, PICA_TLS_CIPHERLIST);
 
 	if (ret != 1)
 	{
-- 
cgit v1.2.1