Software / code / prosody
Changeset
4359:c69cbac4178f
certmanager: Support setting ciphers in SSL config. LuaSec apparently ignores the documented ciphers option.
| author | Waqas Hussain <waqas20@gmail.com> |
|---|---|
| date | Thu, 25 Aug 2011 12:09:16 +0500 |
| parents | 4358:86be454168fb |
| children | 4360:a993a4a2ea0a |
| files | core/certmanager.lua |
| diffstat | 1 files changed, 9 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/core/certmanager.lua Thu Aug 25 12:07:36 2011 +0500 +++ b/core/certmanager.lua Thu Aug 25 12:09:16 2011 +0500 @@ -41,11 +41,19 @@ cafile = resolve_path(config_path, user_ssl_config.cafile); verify = user_ssl_config.verify or default_verify; options = user_ssl_config.options or default_options; - ciphers = user_ssl_config.ciphers; depth = user_ssl_config.depth; }; local ctx, err = ssl_newcontext(ssl_config); + + -- LuaSec ignores the cipher list from the config, so we have to take care + -- of it ourselves (W/A for #x) + if ctx and user_ssl_config.ciphers then + local success; + success, err = ssl.context.setcipher(ctx, user_ssl_config.ciphers); + if not success then ctx = nil; end + end + if not ctx then err = err or "invalid ssl config" local file = err:match("^error loading (.-) %(");
