rubygem-puma/rubygem-puma-3.6.0-fedora-crypto-policy-cipher-list.patch

17 lines
492 B
Diff

diff --git a/ext/puma_http11/mini_ssl.c b/ext/puma_http11/mini_ssl.c
index 7e0fd5e..88c4652 100644
--- a/ext/puma_http11/mini_ssl.c
+++ b/ext/puma_http11/mini_ssl.c
@@ -336,7 +336,7 @@ sslctx_initialize(VALUE self, VALUE mini_ssl_ctx) {
SSL_CTX_set_cipher_list(ctx, RSTRING_PTR(ssl_cipher_filter));
}
else {
- SSL_CTX_set_cipher_list(ctx, "HIGH:!aNULL@STRENGTH");
+ SSL_CTX_set_cipher_list(ctx, "PROFILE=SYSTEM");
}
#if OPENSSL_VERSION_NUMBER < 0x10002000L
--
2.30.0