Skip to content

Commit e9f9fc5

Browse files
gujjwal00bk138
authored andcommitted
libvncclient/tls_openssl: Update anonymous cipher list (#494)
Using 'aNULL' enables anonymous Elliptic Curve cipher suits. It improves compatibility with some TLS libraries, e.g. GnuTLS. Ref: https://www.openssl.org/docs/man1.1.1/man1/ciphers.html
1 parent 5699e35 commit e9f9fc5

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

libvncclient/tls_openssl.c

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -327,8 +327,8 @@ open_ssl_connection (rfbClient *client, int sockfd, rfbBool anonTLS, rfbCredenti
327327
SSL_CTX_set1_param(ssl_ctx, param);
328328
SSL_CTX_set_cipher_list(ssl_ctx, "ALL");
329329
} else { /* anonTLS here */
330-
/* Need ADH cipher for anonTLS, see https://github.com/LibVNC/libvncserver/issues/347#issuecomment-597477103 */
331-
SSL_CTX_set_cipher_list(ssl_ctx, "ADH");
330+
/* Need anonymous ciphers for anonTLS, see https://github.com/LibVNC/libvncserver/issues/347#issuecomment-597477103 */
331+
SSL_CTX_set_cipher_list(ssl_ctx, "aNULL");
332332
#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined LIBRESSL_VERSION_NUMBER
333333
/*
334334
See https://www.openssl.org/docs/man1.1.0/man3/SSL_set_security_level.html

0 commit comments

Comments
 (0)