Force a cipher that use DH parameter

This commit is contained in:
Bruno Silvestre 2018-07-26 11:22:24 -03:00
parent d9d0cd620d
commit 93e0e8cc64
2 changed files with 3 additions and 1 deletions

View File

@ -6,12 +6,13 @@ local ssl = require("ssl")
local params = { local params = {
mode = "client", mode = "client",
protocol = "tlsv1_2", protocol = "any",
key = "../certs/clientAkey.pem", key = "../certs/clientAkey.pem",
certificate = "../certs/clientA.pem", certificate = "../certs/clientA.pem",
cafile = "../certs/rootA.pem", cafile = "../certs/rootA.pem",
verify = {"peer", "fail_if_no_peer_cert"}, verify = {"peer", "fail_if_no_peer_cert"},
options = "all", options = "all",
ciphers = "EDH+AESGCM"
} }
local peer = socket.tcp() local peer = socket.tcp()

View File

@ -38,6 +38,7 @@ local params = {
verify = {"peer", "fail_if_no_peer_cert"}, verify = {"peer", "fail_if_no_peer_cert"},
options = "all", options = "all",
dhparam = dhparam_cb, dhparam = dhparam_cb,
ciphers = "EDH+AESGCM"
} }