| 125 |
|
#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem"; |
| 126 |
|
|
| 127 |
|
|
| 128 |
+ |
/* |
| 129 |
+ |
* ssl_dh_param_file: |
| 130 |
+ |
* |
| 131 |
+ |
* Path to the PEM encoded Diffie-Hellman parameter file. |
| 132 |
+ |
* DH parameters are strictly required when using ciphers |
| 133 |
+ |
* with EDH (ephemeral Diffie-Hellman) key exchange. |
| 134 |
+ |
* |
| 135 |
+ |
* A DH parameter file can be created by running: |
| 136 |
+ |
* |
| 137 |
+ |
* openssl dhparam -out dhparam.pem 1024 |
| 138 |
+ |
* |
| 139 |
+ |
* Further information regarding specific OpenSSL dhparam |
| 140 |
+ |
* command-line options can be found in the OpenSSL manual. |
| 141 |
+ |
*/ |
| 142 |
|
#ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem"; |
| 143 |
|
|
| 144 |
|
/* |
| 147 |
|
* List of ciphers that are supported by _this_ server. Can be used to enforce |
| 148 |
|
* specific ciphers for incoming SSL/TLS connections. |
| 149 |
|
* If a client (which also includes incoming server connections) isn't capable |
| 150 |
< |
* of any cipher listed below, the connection will be simply rejected. |
| 150 |
> |
* of any cipher listed below, the connection will simply be rejected. |
| 151 |
|
* |
| 152 |
|
* A list of supported ciphers can be obtained by running: |
| 153 |
|
* |
| 159 |
|
#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA"; |
| 160 |
|
|
| 161 |
|
/* |
| 162 |
< |
* ssl_server_protocol: |
| 162 |
> |
* ssl_server_method: |
| 163 |
> |
* ssl_client_method: |
| 164 |
> |
* |
| 165 |
|
* SSL/TLS protocols we provide for incoming secure connections. |
| 166 |
|
* This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1. |
| 167 |
|
* SSLv2 is not suppported. |