| 124 |
|
*/ |
| 125 |
|
#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem"; |
| 126 |
|
|
| 127 |
+ |
|
| 128 |
+ |
#ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem"; |
| 129 |
+ |
|
| 130 |
+ |
/* |
| 131 |
+ |
* ssl_cipher_list: |
| 132 |
+ |
* |
| 133 |
+ |
* List of ciphers that are supported by _this_ server. Can be used to enforce |
| 134 |
+ |
* specific ciphers for incoming SSL/TLS connections. |
| 135 |
+ |
* If a client (which also includes incoming server connections) isn't capable |
| 136 |
+ |
* of any cipher listed below, the connection will be simply rejected. |
| 137 |
+ |
* |
| 138 |
+ |
* A list of supported ciphers can be obtained by running: |
| 139 |
+ |
* |
| 140 |
+ |
* openssl ciphers -ssl3 -tls1 -v |
| 141 |
+ |
* |
| 142 |
+ |
* Multiple ciphers are separated by colons. The order of preference is from |
| 143 |
+ |
* left to right. |
| 144 |
+ |
*/ |
| 145 |
+ |
#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA"; |
| 146 |
+ |
|
| 147 |
|
/* |
| 148 |
|
* ssl_server_protocol: |
| 149 |
|
* SSL/TLS protocols we provide for incoming secure connections. |
| 507 |
|
/* class: the class this server is in */ |
| 508 |
|
class = "server"; |
| 509 |
|
|
| 510 |
+ |
#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA"; |
| 511 |
+ |
|
| 512 |
|
/* |
| 513 |
|
* autoconn - controls whether we autoconnect to this server or not, |
| 514 |
|
* dependent on class limits. By default, this is disabled. |
