@@ -71,7 +71,10 @@ data TLSSettings = TLSSettings
7171 -- ^ The TLS versions this server accepts.
7272 --
7373 -- Default: '[TLS.SSL3,TLS.TLS10,TLS.TLS11,TLS.TLS12]'.
74+ , tlsCiphers :: [TLS.Cipher]
75+ -- ^ The TLS ciphers this server accepts.
7476 --
77+ -- Default: '[TLSExtra.cipher_AES128_SHA1, TLSExtra.cipher_AES256_SHA1, TLSExtra.cipher_RC4_128_MD5, TLSExtra.cipher_RC4_128_SHA1]'
7578 }
7679
7780-- | An action when a plain HTTP comes to HTTP over TLS/SSL port.
@@ -95,6 +98,7 @@ defaultTlsSettings = TLSSettings
9598 , onInsecure = DenyInsecure "This server only accepts secure HTTPS connections."
9699 , tlsLogging = TLS.defaultLogging
97100 , tlsAllowedVersions = [TLS.SSL3,TLS.TLS10,TLS.TLS11,TLS.TLS12]
101+ , tlsCiphers = ciphers
98102 }
99103
100104-- | Running 'Application' with 'TLSSettings' and 'Settings' using
@@ -108,7 +112,7 @@ runTLSSocket TLSSettings {..} set sock app = do
108112 (\sp -> sp { TLS.serverWantClientCert = False }) $
109113 TLS.defaultParamsServer
110114 { TLS.pAllowedVersions = tlsAllowedVersions
111− , TLS.pCiphers = ciphers
115+ , TLS.pCiphers = tlsCiphers
112116 , TLS.pCertificates = zip certs $ (Just pk):repeat Nothing
113117 , TLS.pLogging = tlsLogging
114118 }