Preferring system crypto policy.
If we don't call SSL_CTX_set_cipher_list(), then it uses the system's default. Link: <https://fedoraproject.org/wiki/Changes/CryptoPolicy> Link: <https://docs.fedoraproject.org/en-US/packaging-guidelines/CryptoPolicies/> Link: <https://www.redhat.com/en/blog/consistent-security-crypto-policies-red-hat-enterprise-linux-8> Signed-off-by: Remi Collet <remi@remirepo.net> Acked-by: Andrei Belov <defan@nginx.com> [ alx: add changelog and tweak commit message ] Signed-off-by: Alejandro Colomar <alx@nginx.com>
This commit is contained in:
committed by
Alejandro Colomar
parent
f93361979a
commit
93d24bb114
@@ -37,6 +37,12 @@ removed $uri auto-append for "share" when loading configuration.
|
||||
</para>
|
||||
</change>
|
||||
|
||||
<change type="change">
|
||||
<para>
|
||||
prefer system crypto policy, instead of hardcoding a default.
|
||||
</para>
|
||||
</change>
|
||||
|
||||
<change type="feature">
|
||||
<para>
|
||||
compatibility with PHP 8.2.
|
||||
|
||||
Reference in New Issue
Block a user