ssl: allow cipher list to be overridden (closes #67)

[solanum.git] / doc / reference.conf

diff --git a/doc/reference.conf b/doc/reference.conf
index 6ac161717cb181226aaabbfaf762b29c1cf784d8..6c3806e4b892e6428dcacc8aee680e7f6a597008 100755 (executable)
--- a/doc/reference.conf
+++ b/doc/reference.conf
@@ -151,6 +151,9 @@ serverinfo {
        /* ssl_dh_params: DH parameters, generate with openssl dhparam -out dh.pem 1024 */
        ssl_dh_params = "etc/dh.pem";
 
+       /* ssl_cipher_list: A list of ciphers, dependent on your TLS backend */
+       #ssl_cipher_list = "EECDH+HIGH:EDH+HIGH:HIGH:!aNULL";
+
        /* ssld_count: number of ssld processes you want to start, if you
         * have a really busy server, using N-1 where N is the number of
         * cpu/cpu cores you have might be useful. A number greater than one