You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@trafficserver.apache.org by Igor Galić <i....@brainsware.org> on 2014/05/26 12:49:49 UTC

Re: git commit: TS-2274: Turned on honor server cipher order


----- Original Message -----
> Repository: trafficserver
> Updated Branches:
>   refs/heads/master f9eb37260 -> 8e01f9dda
> 
> 
> TS-2274: Turned on honor server cipher order
> 
> 
> Project: http://git-wip-us.apache.org/repos/asf/trafficserver/repo
> Commit: http://git-wip-us.apache.org/repos/asf/trafficserver/commit/8e01f9dd
> Tree: http://git-wip-us.apache.org/repos/asf/trafficserver/tree/8e01f9dd
> Diff: http://git-wip-us.apache.org/repos/asf/trafficserver/diff/8e01f9dd
> 
> Branch: refs/heads/master
> Commit: 8e01f9ddac16fd9610231c313a205d88723a8a12
> Parents: f9eb372
> Author: Bryan Call <bc...@apache.org>
> Authored: Thu May 22 11:59:50 2014 -0700
> Committer: Bryan Call <bc...@apache.org>
> Committed: Thu May 22 11:59:50 2014 -0700
> 
> ----------------------------------------------------------------------
>  mgmt/RecordsConfig.cc | 2 +-

what about records.config itself?


>  1 file changed, 1 insertion(+), 1 deletion(-)
> ----------------------------------------------------------------------
> 
> 
> http://git-wip-us.apache.org/repos/asf/trafficserver/blob/8e01f9dd/mgmt/RecordsConfig.cc
> ----------------------------------------------------------------------
> diff --git a/mgmt/RecordsConfig.cc b/mgmt/RecordsConfig.cc
> index d316a7c..d605361 100644
> --- a/mgmt/RecordsConfig.cc
> +++ b/mgmt/RecordsConfig.cc
> @@ -1251,7 +1251,7 @@ RecordElement RecordsConfig[] = {
>    ,
>    {RECT_CONFIG, "proxy.config.ssl.server.cipher_suite", RECD_STRING,
>    "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:AES128-GCM-SHA256:AES256-GCM-SHA384:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA:RC4-MD5:AES128-SHA:AES256-SHA:DES-CBC3-SHA!SRP:!DSS:!PSK:!aNULL:!eNULL:!SSLv2",
>    RECU_RESTART_TS, RR_NULL, RECC_NULL, NULL, RECA_NULL}
>    ,
> -  {RECT_CONFIG, "proxy.config.ssl.server.honor_cipher_order", RECD_INT, "0",
> RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-1]", RECA_NULL}
> +  {RECT_CONFIG, "proxy.config.ssl.server.honor_cipher_order", RECD_INT, "1",
> RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-1]", RECA_NULL}
>    ,
>    {RECT_CONFIG, "proxy.config.ssl.server_port", RECD_INT, "-1",
>    RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-65535]", RECA_NULL}
>    ,
> 
> 

-- 
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.galic@brainsware.org
URL: http://brainsware.org/
GPG: 8716 7A9F 989B ABD5 100F  4008 F266 55D6 2998 1641