ssl: allow cipher list to be overridden (closes #67)

[solanum.git] / libratbox / src / mbedtls.c

diff --git a/libratbox/src/mbedtls.c b/libratbox/src/mbedtls.c
index 6a8c6b5e6246319a48dedac9834b531049449b2d..6feab1bd85c71aaae496227bad0a1f5b34141df8 100644 (file)
--- a/libratbox/src/mbedtls.c
+++ b/libratbox/src/mbedtls.c
@@ -321,7 +321,7 @@ rb_init_ssl(void)
 }
 
 int
-rb_setup_ssl_server(const char *cert, const char *keyfile, const char *dhfile)
+rb_setup_ssl_server(const char *cert, const char *keyfile, const char *dhfile, const char *cipher_list)
 {
        int ret;
 
@@ -374,6 +374,8 @@ rb_setup_ssl_server(const char *cert, const char *keyfile, const char *dhfile)
                return 0;
        }
 
+       /* XXX support cipher lists when added to mbedtls */
+
        return 1;
 }
 
@@ -595,5 +597,12 @@ rb_get_ssl_info(char *buf, size_t len)
                    MBEDTLS_VERSION_STRING, version_str);
 }
 
+const char *
+rb_ssl_get_cipher(rb_fde_t *F)
+{
+       if(F == NULL || F->ssl == NULL)
+               return NULL;
+       return mbedtls_ssl_get_ciphersuite(SSL_P(F));
+}
 
 #endif /* HAVE_GNUTLS */