# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1384999869 0
# Node ID f7601ce30cfc73852b6070ec2d8c5992dbbbeb80
# Parent  e6fed1d80116a62cd6eec94c7111552548dffddc
certmanager: Further cipher string tweaking. Re-enable ciphers required for DSA and ECDH certs/keys.

diff -r e6fed1d80116 -r f7601ce30cfc core/certmanager.lua
--- a/core/certmanager.lua	Tue Nov 12 02:13:01 2013 +0000
+++ b/core/certmanager.lua	Thu Nov 21 02:11:09 2013 +0000
@@ -70,7 +70,7 @@
 		options = user_ssl_config.options or default_options;
 		depth = user_ssl_config.depth;
 		curve = user_ssl_config.curve or "secp384r1";
-		ciphers = user_ssl_config.ciphers or "HIGH+kEDH:HIGH+kEECDH:HIGH+kRSA:!DSS:!3DES:!aNULL";
+		ciphers = user_ssl_config.ciphers or "HIGH+kEDH:HIGH+kEECDH:HIGH:!PSK:!SRP:!3DES:!aNULL";
 		dhparam = user_ssl_config.dhparam;
 	};