Revert "no SSLv3 damn it"
authorAaron Kaplan <aaron@lo-res.org>
Fri, 17 Oct 2014 12:21:03 +0000 (14:21 +0200)
committerAaron Kaplan <aaron@lo-res.org>
Fri, 17 Oct 2014 12:21:03 +0000 (14:21 +0200)
This reverts commit 3cffbdde793d21fa93446f43a35d615bc21c8894.

src/configuration/DBs/PostgreSQL/9.3/postgresql.conf

index 624a5c7..08f20f4 100644 (file)
@@ -79,7 +79,7 @@
 
 #authentication_timeout = 1min         # 1s-600s
 ssl = on                               # (change requires restart)
-ssl_ciphers = 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:!SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA'        # allowed SSL ciphers
+ssl_ciphers = 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA'        # allowed SSL ciphers
                                        # (change requires restart)
 #ssl_renegotiation_limit = 512MB       # amount of data between renegotiations
 ssl_cert_file = 'server.crt'           # (change requires restart)