Preferring system crypto policy.

If we don't call SSL_CTX_set_cipher_list(), then it uses the
system's default.

Link: <https://fedoraproject.org/wiki/Changes/CryptoPolicy>
Link: <https://docs.fedoraproject.org/en-US/packaging-guidelines/CryptoPolicies/>
Link: <https://www.redhat.com/en/blog/consistent-security-crypto-policies-red-hat-enterprise-linux-8>
Signed-off-by: Remi Collet <remi@remirepo.net>
Acked-by: Andrei Belov <defan@nginx.com>
[ alx: add changelog and tweak commit message ]
Signed-off-by: Alejandro Colomar <alx@nginx.com>
This commit is contained in:
Remi Collet
2019-01-16 08:38:53 +01:00
committed by Alejandro Colomar
parent f93361979a
commit 93d24bb114
2 changed files with 13 additions and 7 deletions

View File

@@ -37,6 +37,12 @@ removed $uri auto-append for "share" when loading configuration.
</para>
</change>
<change type="change">
<para>
prefer system crypto policy, instead of hardcoding a default.
</para>
</change>
<change type="feature">
<para>
compatibility with PHP 8.2.