]> git.proxmox.com Git - pve-http-server.git/commitdiff
constructor: split TLS flags to separate lines
authorThomas Lamprecht <t.lamprecht@proxmox.com>
Tue, 16 Nov 2021 06:34:01 +0000 (07:34 +0100)
committerThomas Lamprecht <t.lamprecht@proxmox.com>
Tue, 16 Nov 2021 06:34:11 +0000 (07:34 +0100)
easier to grasp what's actually being set..

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
src/PVE/APIServer/AnyEvent.pm

index e765418f6fcd7562d51182d5f5ae7d0e1609b296..c159b8d5f3fd1330e57876723bfc671c92c71210 100644 (file)
@@ -1885,9 +1885,12 @@ sub new {
            $self->{ssl}->{dh} = 'skip2048';
        }
 
-       my $tls_ctx_flags = &Net::SSLeay::OP_NO_COMPRESSION | &Net::SSLeay::OP_SINGLE_ECDH_USE |
-           &Net::SSLeay::OP_SINGLE_DH_USE | &Net::SSLeay::OP_NO_RENEGOTIATION;
-       if ( delete $self->{ssl}->{honor_cipher_order} ) {
+       my $tls_ctx_flags = 0;
+       $tls_ctx_flags |= &Net::SSLeay::OP_NO_COMPRESSION;
+       $tls_ctx_flags |= &Net::SSLeay::OP_SINGLE_ECDH_USE;
+       $tls_ctx_flags |= &Net::SSLeay::OP_SINGLE_DH_USE;
+       $tls_ctx_flags |= &Net::SSLeay::OP_NO_RENEGOTIATION;
+       if (delete $self->{ssl}->{honor_cipher_order}) {
            $tls_ctx_flags |= &Net::SSLeay::OP_CIPHER_SERVER_PREFERENCE;
        }