summaryrefslogtreecommitdiff
path: root/imap/src/osdep/unix/ssl_unix.c
diff options
context:
space:
mode:
authorEduardo Chappa <chappa@washington.edu>2021-04-17 23:22:48 -0600
committerEduardo Chappa <chappa@washington.edu>2021-04-17 23:22:48 -0600
commitec66afcc51369f994cf04960fc4828cb007176bd (patch)
tree2056be54d1b2ff06a02377c41594efe4c29274d3 /imap/src/osdep/unix/ssl_unix.c
parentcd24f8efb57dd2b057ab6a216ff3789876c62420 (diff)
downloadalpine-ec66afcc51369f994cf04960fc4828cb007176bd.tar.xz
* Add new variable ssl-ciphers to list the ciphers that will be used when
negotiating a secure connection with a SSL server. Work in collaboration with professor Martin Trusler.
Diffstat (limited to 'imap/src/osdep/unix/ssl_unix.c')
-rw-r--r--imap/src/osdep/unix/ssl_unix.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/imap/src/osdep/unix/ssl_unix.c b/imap/src/osdep/unix/ssl_unix.c
index 1f64b57..5d3ffcd 100644
--- a/imap/src/osdep/unix/ssl_unix.c
+++ b/imap/src/osdep/unix/ssl_unix.c
@@ -395,7 +395,7 @@ static char *ssl_start_work (SSLSTREAM *stream,char *host,unsigned long flags)
int minv, maxv;
int masklow, maskhigh;
char *s,*t,*err,tmp[MAILTMPLEN], buf[256];
- char *CAfile, *CApath;
+ char *CAfile, *CApath, *ciphers;
sslcertificatequery_t scq =
(sslcertificatequery_t) mail_parameters (NIL,GET_SSLCERTIFICATEQUERY,NIL);
sslclientcert_t scc =
@@ -414,6 +414,8 @@ static char *ssl_start_work (SSLSTREAM *stream,char *host,unsigned long flags)
if (flags & NET_NOVALIDATECERT)
SSL_CTX_set_verify (stream->context,SSL_VERIFY_NONE,NIL);
else SSL_CTX_set_verify (stream->context,SSL_VERIFY_PEER,ssl_open_verify);
+ /* set cipher list */
+ ciphers = (char *) mail_parameters (NIL,GET_SSLCIPHERS,NIL);
/* if a non-standard path desired */
CAfile = (char *) mail_parameters (NIL,GET_SSLCAFILE,NIL);
CApath = (char *) mail_parameters (NIL,GET_SSLCAPATH,NIL);