From 7599c4789416b3de6c6314cfb8bed86838e96387 Mon Sep 17 00:00:00 2001 From: Thomas Lamprecht Date: Tue, 16 Nov 2021 07:34:01 +0100 Subject: [PATCH] constructor: split TLS flags to separate lines easier to grasp what's actually being set.. Signed-off-by: Thomas Lamprecht --- src/PVE/APIServer/AnyEvent.pm | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/src/PVE/APIServer/AnyEvent.pm b/src/PVE/APIServer/AnyEvent.pm index e765418..c159b8d 100644 --- a/src/PVE/APIServer/AnyEvent.pm +++ b/src/PVE/APIServer/AnyEvent.pm @@ -1885,9 +1885,12 @@ sub new { $self->{ssl}->{dh} = 'skip2048'; } - my $tls_ctx_flags = &Net::SSLeay::OP_NO_COMPRESSION | &Net::SSLeay::OP_SINGLE_ECDH_USE | - &Net::SSLeay::OP_SINGLE_DH_USE | &Net::SSLeay::OP_NO_RENEGOTIATION; - if ( delete $self->{ssl}->{honor_cipher_order} ) { + my $tls_ctx_flags = 0; + $tls_ctx_flags |= &Net::SSLeay::OP_NO_COMPRESSION; + $tls_ctx_flags |= &Net::SSLeay::OP_SINGLE_ECDH_USE; + $tls_ctx_flags |= &Net::SSLeay::OP_SINGLE_DH_USE; + $tls_ctx_flags |= &Net::SSLeay::OP_NO_RENEGOTIATION; + if (delete $self->{ssl}->{honor_cipher_order}) { $tls_ctx_flags |= &Net::SSLeay::OP_CIPHER_SERVER_PREFERENCE; }