From 3e8cd265b054d21fa5d97312d6156126127117f3 Mon Sep 17 00:00:00 2001 From: Seonah Moon Date: Mon, 17 Sep 2018 15:39:17 +0900 Subject: [PATCH] Add cipher selection for TV ipv6 option will be enabled next commit Change-Id: Ie0e32617cf8140b6267b82548bc9b531de2f09d5 --- lib/vtls/openssl.c | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c index 2a6b3cf..04c4e39 100644 --- a/lib/vtls/openssl.c +++ b/lib/vtls/openssl.c @@ -164,7 +164,18 @@ static unsigned long OpenSSL_version_num(void) #define OSSL_PACKAGE "OpenSSL" #endif -#if (OPENSSL_VERSION_NUMBER >= 0x10100000L) +#if defined (TIZEN_TV_EXT) +#define DEFAULT_CIPHER_SELECTION \ +"ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:" \ +"DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:" \ +"ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:" \ +"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:" \ +"DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:" \ +"AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:" \ +"ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:" \ +"EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:" \ +"DES-CBC3-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA" +#elif (OPENSSL_VERSION_NUMBER >= 0x10100000L) /* up2date versions of OpenSSL maintain the default reasonably secure without * breaking compatibility, so it is better not to override the default by curl */ -- 2.7.4