Red Hat issue 1019964: socat now uses the system certificate store

This commit is contained in:
Gerhard Rieger 2015-04-02 16:00:46 +02:00
parent 78497ff3c7
commit 066dac0812
2 changed files with 5 additions and 1 deletions

View file

@ -32,6 +32,10 @@ security:
Red Hat issue 1019964: socat now uses the system certificate store with
OPENSSL when neither options cafile nor capath are used
Red Hat issue 1019972: needs to specify OpenSSL cipher suites
Default cipherlist is now "HIGH:-NULL:-PSK:-aNULL" instead of empty to
prevent downgrade attacks
corrections:
LISTEN based addresses applied some address options, e.g. so-keepalive,
to the listening file descriptor instead of the connected file

View file

@ -852,7 +852,7 @@ int
bool opt_fips = false;
const SSL_METHOD *method;
char *me_str = NULL; /* method string */
char *ci_str = NULL; /* cipher string */
char *ci_str = "HIGH:-NULL:-PSK:-aNULL"; /* cipher string */
char *opt_key = NULL; /* file name of client private key */
char *opt_dhparam = NULL; /* file name of DH params */
char *opt_cafile = NULL; /* certificate authority file */