diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2014-12-31 22:40:55 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2014-12-31 22:40:55 +0200 |
| commit | 93658370714132cd7fac931ca72922f0b28dea54 (patch) | |
| tree | 2103baefa0a264a373fdd866bc4c76eb682e95be /doc/cha-gtls-app.texi | |
| parent | 40143c7ab9470d0e53ee91d4775bda258579a183 (diff) | |
| download | gnutls-93658370714132cd7fac931ca72922f0b28dea54.tar.gz | |
ARCFOUR-128 is disabled by default
Diffstat (limited to 'doc/cha-gtls-app.texi')
| -rw-r--r-- | doc/cha-gtls-app.texi | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/doc/cha-gtls-app.texi b/doc/cha-gtls-app.texi index 615da051d1..7540a7dd31 100644 --- a/doc/cha-gtls-app.texi +++ b/doc/cha-gtls-app.texi @@ -922,7 +922,7 @@ Means that a compile-time specified system configuration file@footnote{The defau will be used to expand the provided keyword. That is used to impose system-specific policies. It may be followed by additional options that will be appended to the system string (e.g., "@@SYSTEM:+SRP"). The system file should have the -format 'KEYWORD=VALUE', e.g., 'SYSTEM=NORMAL:-ARCFOUR-128'. +format 'KEYWORD=VALUE', e.g., 'SYSTEM=NORMAL:+ARCFOUR-128'. @item PERFORMANCE @tab All the known to be secure ciphersuites are enabled, @@ -1031,7 +1031,7 @@ appended with an algorithm will add this algorithm. @headitem Type @tab Keywords @item Ciphers @tab AES-128-CBC, AES-256-CBC, AES-128-GCM, CAMELLIA-128-CBC, -CAMELLIA-256-CBC, ARCFOUR-128, 3DES-CBC ARCFOUR-40. Catch all +CAMELLIA-256-CBC, ARCFOUR-128, 3DES-CBC. Catch all name is CIPHER-ALL which will add all the algorithms from NORMAL priority. @@ -1205,8 +1205,8 @@ The default priority without the HMAC-MD5: Specifying RSA with AES-128-CBC: "NONE:+VERS-TLS-ALL:+MAC-ALL:+RSA:+AES-128-CBC:+SIGN-ALL:+COMP-NULL" -Specifying the defaults except ARCFOUR-128: - "NORMAL:-ARCFOUR-128" +Specifying the defaults plus ARCFOUR-128: + "NORMAL:+ARCFOUR-128" Enabling the 128-bit secure ciphers, while disabling TLS 1.0 and enabling compression: "SECURE128:-VERS-TLS1.0:+COMP-DEFLATE" |