AV-98-fork

A fork of https://tildegit.org/solderpunk/AV-98
Log (Feed) | Files | Refs (Tags) | README | LICENSE
commit 16dc7dc83104cda92a89e09f1b21e77df63c7379
parent fecd46378c9ec8de18d6abf632567726c601751e
Author: Solderpunk <solderpunk@sdf.org>
Date:   Sun, 31 May 2020 00:02:37 +0200

Cipher hardening.

Diffstat:

Mav98.py | 2+-


1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/av98.py b/av98.py
@@ -605,7 +605,7 @@ Slow internet connection?  Use 'set timeout' to be more patient.""")
             context.options |= ssl.OP_NO_SSLv2
         # Try to enforce sensible ciphers
         try:
-            context.set_ciphers("AES+DHE:AES+ECDHE:CHACHA20+DHE:CHACHA20+ECDHE:!SHA1:@STRENGTH")
+            context.set_ciphers("AESGCM+ECDHE:AESGCM+DHE:CHACHA20+ECDHE:CHACHA20+DHE:!DSS:!ECDSA:!SHA1:!MD5:@STRENGTH")
         except ssl.SSLError:
             # Rely on the server to only support sensible things, I guess...
             pass