easier to grasp what's actually being set..
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
$self->{ssl}->{dh} = 'skip2048';
}
- my $tls_ctx_flags = &Net::SSLeay::OP_NO_COMPRESSION | &Net::SSLeay::OP_SINGLE_ECDH_USE |
- &Net::SSLeay::OP_SINGLE_DH_USE | &Net::SSLeay::OP_NO_RENEGOTIATION;
- if ( delete $self->{ssl}->{honor_cipher_order} ) {
+ my $tls_ctx_flags = 0;
+ $tls_ctx_flags |= &Net::SSLeay::OP_NO_COMPRESSION;
+ $tls_ctx_flags |= &Net::SSLeay::OP_SINGLE_ECDH_USE;
+ $tls_ctx_flags |= &Net::SSLeay::OP_SINGLE_DH_USE;
+ $tls_ctx_flags |= &Net::SSLeay::OP_NO_RENEGOTIATION;
+ if (delete $self->{ssl}->{honor_cipher_order}) {
$tls_ctx_flags |= &Net::SSLeay::OP_CIPHER_SERVER_PREFERENCE;
}