diff options
| author | Chris Buechler <cmb@pfsense.org> | 2015-03-12 00:52:12 -0500 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2015-03-12 00:52:12 -0500 |
| commit | 524a0140260c2abb65b7d0b19700c49faea0aedf (patch) | |
| tree | 4fcaaf8397c7daf26ef6bc3a72e8aae0fed5ac43 /etc | |
| parent | 486d7278481b1f4d61c28d18ab5ba164ab5e9c70 (diff) | |
| download | pfsense-524a0140260c2abb65b7d0b19700c49faea0aedf.zip pfsense-524a0140260c2abb65b7d0b19700c49faea0aedf.tar.gz | |
use-compression is no longer a valid config option in lighttpd, it can't be enabled. This just throws an error in the log, remove it.
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/system.inc | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/etc/inc/system.inc b/etc/inc/system.inc index 3d032d4..1cfdfb5 100644 --- a/etc/inc/system.inc +++ b/etc/inc/system.inc @@ -1464,9 +1464,6 @@ EOD; // where ssl.cipher-list is set, this is automatically enabled, but set it explicitly anyway. $lighty_config .= "ssl.honor-cipher-order = \"enable\"\n"; - // Explicit disable compression to mitigate CRIME attack - $lighty_config .= "ssl.use-compression = \"disable\"\n"; - $lighty_config .= "ssl.cipher-list = \"AES128+EECDH:AES256+EECDH:AES128+EDH:AES256+EDH:AES128-SHA:AES256-SHA:!aNULL:!eNULL:!DSS\"\n"; if (!(empty($ca) || (strlen(trim($ca)) == 0))) { |
