# HG changeset patch # User franky # Date 1455142124 -3600 # Node ID 3d266140a8fb0d3d107e4fb2a98f5afc1094033e # Parent bcb7bfa1cd093067b3631e1e201622803179d8f9 Add ssl_ciphers and ssl_ca option in mcabberrc.example diff -r bcb7bfa1cd09 -r 3d266140a8fb mcabber/mcabberrc.example --- a/mcabber/mcabberrc.example Thu Feb 04 18:43:57 2016 +0100 +++ b/mcabber/mcabberrc.example Wed Feb 10 23:08:44 2016 +0100 @@ -48,6 +48,15 @@ # ssl to 1. It's not possible to use old-style SSL and TLS together. #set ssl = 0 set tls = 1 +# It is possible to set the allowed ciphers which openssl/gnutls can use for +# the encrypted connection. +# openssl (get the name of the available ciphers via 'openssl ciphers'): +#set ssl_ciphers = ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384 +# gnutls (check the priorities option of 'man gnutls_priority_init'): +#set ssl_ciphers = PFS +# If you'd like to explicitly specify trusted certificates, set the ssl_ca +# option to a certificate file or path. +#set ssl_ca = ~/.mcabber/trusted_cert.pem # Moreover, it's possible to check whether the fingerprint of the # ssl certificate matches ssl_fingerprint. # You can get the fingerprint of your server either with gnutls or openssl: