on master help sign in
removing RC4 (#400)
commit55319885e28a29921110d49afd68d385b04b94e4 authorKazu Yamamoto <kazu@iij.ad.jp> dateWed 22 Jul 2015, 09:33 (11 years ago) parent7097b97
1 file changed+1−4
warp-tls/Network/Wai/Handler/WarpTLS.hs+1−4
warp-tls/Network/Wai/Handler/WarpTLS.hs+1−4
@@ -97,7 +97,7 @@ data TLSSettings = TLSSettings {
9797 -- ^ The TLS ciphers this server accepts.
9898 --
9999 -- >>> tlsCiphers defaultTlsSettings
100− -- [ECDHE-RSA-AES128GCM-SHA256,DHE-RSA-AES128GCM-SHA256,DHE-RSA-AES256-SHA256,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-SHA1,DHE-RSA-AES128-SHA1,DHE-DSA-AES128-SHA1,DHE-DSA-AES256-SHA1,DHE-DSA-RC4-SHA1,RSA-aes128-sha1,RSA-aes256-sha1,RSA-rc4-128-md5,RSA-rc4-128-sha1]
100+ -- [ECDHE-RSA-AES128GCM-SHA256,DHE-RSA-AES128GCM-SHA256,DHE-RSA-AES256-SHA256,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-SHA1,DHE-RSA-AES128-SHA1,DHE-DSA-AES128-SHA1,DHE-DSA-AES256-SHA1,RSA-aes128-sha1,RSA-aes256-sha1]
101101 --
102102 -- Since 1.4.2
103103 , tlsWantClientCert :: Bool
@@ -147,11 +147,8 @@ ciphers =
147147 , TLSExtra.cipher_DHE_RSA_AES128_SHA1
148148 , TLSExtra.cipher_DHE_DSS_AES128_SHA1
149149 , TLSExtra.cipher_DHE_DSS_AES256_SHA1
150− , TLSExtra.cipher_DHE_DSS_RC4_SHA1
151150 , TLSExtra.cipher_AES128_SHA1
152151 , TLSExtra.cipher_AES256_SHA1
153− , TLSExtra.cipher_RC4_128_MD5
154− , TLSExtra.cipher_RC4_128_SHA1
155152 ]
156153
157154----------------------------------------------------------------