ssl: allow cipher list to be overridden (closes #67)

[solanum.git] / libratbox / src / openssl.c

diff --git a/libratbox/src/openssl.c b/libratbox/src/openssl.c
index fbdeefdffed66fd8974e8fbbc348712a2f160446..ab3e3400a71d8b0327ce30fad56093bd5e91ae68 100644 (file)
--- a/libratbox/src/openssl.c
+++ b/libratbox/src/openssl.c
@@ -397,7 +397,7 @@ rb_init_ssl(void)
 
 
 int
-rb_setup_ssl_server(const char *cert, const char *keyfile, const char *dhfile)
+rb_setup_ssl_server(const char *cert, const char *keyfile, const char *dhfile, const char *cipher_list)
 {
        DH *dh;
        unsigned long err;
@@ -455,6 +455,12 @@ rb_setup_ssl_server(const char *cert, const char *keyfile, const char *dhfile)
                                   dhfile, get_ssl_error(err));
                }
        }
+
+       if (cipher_list != NULL)
+       {
+               SSL_CTX_set_cipher_list(ssl_server_ctx, cipher_list);
+       }
+
        return 1;
 }