ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/trunk/doc/reference.conf
(Generate patch)

Comparing ircd-hybrid-8/doc/example.conf (file contents):
Revision 1350 by michael, Sun Apr 1 18:23:29 2012 UTC vs.
Revision 1351 by michael, Thu Apr 12 22:56:05 2012 UTC

# Line 125 | Line 125 | serverinfo {
125          #ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
126  
127  
128 +        /*
129 +         * ssl_dh_param_file:
130 +         *
131 +         * Path to the PEM encoded Diffie-Hellman parameter file.
132 +         * DH parameters are strictly required when using ciphers
133 +         * with EDH (ephemeral Diffie-Hellman) key exchange.
134 +         *
135 +         * A DH parameter file can be created by running:
136 +         *
137 +         *      openssl dhparam -out dhparam.pem 1024
138 +         *
139 +         * Further information regarding specific OpenSSL dhparam
140 +         * command-line options can be found in the OpenSSL manual.
141 +         */
142          #ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem";
143  
144          /*
# Line 133 | Line 147 | serverinfo {
147           * List of ciphers that are supported by _this_ server. Can be used to enforce
148           * specific ciphers for incoming SSL/TLS connections.
149           * If a client (which also includes incoming server connections) isn't capable
150 <         * of any cipher listed below, the connection will be simply rejected.
150 >         * of any cipher listed below, the connection will simply be rejected.
151           *
152           * A list of supported ciphers can be obtained by running:
153           *
# Line 145 | Line 159 | serverinfo {
159          #ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
160  
161          /*
162 <         * ssl_server_protocol:
162 >         * ssl_server_method:
163 >         * ssl_client_method:
164 >         *
165           * SSL/TLS protocols we provide for incoming secure connections.
166           * This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1.
167           * SSLv2 is not suppported.

Diff Legend

Removed lines
+ Added lines
< Changed lines (old)
> Changed lines (new)