From c01675d34288018e46d8b92aacacac4151a85d8f Mon Sep 17 00:00:00 2001
From: Tatsuya Kinoshita <tats@debian.org>
Date: Wed, 10 Feb 2021 19:20:37 +0900
Subject: New option ssl_cipher to specify ciphers for TLSv1.2 and below

---
 fm.h | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'fm.h')

diff --git a/fm.h b/fm.h
index 216cd53..9d1995e 100644
--- a/fm.h
+++ b/fm.h
@@ -1191,7 +1191,12 @@ global int ssl_path_modified init(FALSE);
 				 * defined(USE_SSL_VERIFY) */
 #ifdef USE_SSL
 global char *ssl_forbid_method init("2, 3");
+#if (OPENSSL_VERSION_NUMBER < 0x10100000L) || defined(LIBRESSL_VERSION_NUMBER)
+global char *ssl_cipher init("DEFAULT:!LOW:!RC4:!EXP");
+#else
+global char *ssl_cipher init(NULL);
 #endif
+#endif				/* USE_SSL */
 
 global int is_redisplay init(FALSE);
 global int clear_buffer init(TRUE);
-- 
cgit v1.2.3