proxmox-mirrors/pve-http-server
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-http-server synced 2025-10-31 02:52:06 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

constructor: split TLS flags to separate lines

Browse Source 
easier to grasp what's actually being set..

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2021-11-16 07:34:01 +01:00
parent a0434e126e
commit 7599c47894
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/PVE/APIServer/AnyEvent.pm
View File

@ -1885,9 +1885,12 @@ sub new {
$self->{ssl}->{dh} = 'skip2048';
}
my $tls_ctx_flags = &Net::SSLeay::OP_NO_COMPRESSION | &Net::SSLeay::OP_SINGLE_ECDH_USE |
&Net::SSLeay::OP_SINGLE_DH_USE | &Net::SSLeay::OP_NO_RENEGOTIATION;
if ( delete $self->{ssl}->{honor_cipher_order} ) {
my $tls_ctx_flags = 0;
$tls_ctx_flags |= &Net::SSLeay::OP_NO_COMPRESSION;
$tls_ctx_flags |= &Net::SSLeay::OP_SINGLE_ECDH_USE;
$tls_ctx_flags |= &Net::SSLeay::OP_SINGLE_DH_USE;
$tls_ctx_flags |= &Net::SSLeay::OP_NO_RENEGOTIATION;
if (delete $self->{ssl}->{honor_cipher_order}) {
$tls_ctx_flags |= &Net::SSLeay::OP_CIPHER_SERVER_PREFERENCE;
}