fhem.pl: add sslVersion (Forum #39094)

git-svn-id: https://svn.fhem.de/fhem/trunk@8952 2b470e98-0d58-463d-a4d8-8e2adae1ed80
This commit is contained in:
rudolfkoenig
2015-07-13 12:30:26 +00:00
parent cae8e09ca5
commit f88e7d8e8e
7 changed files with 42 additions and 5 deletions

View File

@@ -83,6 +83,10 @@ TcpServer_Accept($$)
#$clientinfo[0]->blocking(0); # Forum #24799
if($hash->{SSL}) {
# Forum #27565: SSLv23:!SSLv3:!SSLv2', #35004: TLSv12:!SSLv3
my $sslVersion = AttrVal($hash->{NAME}, "sslVersion",
AttrVal("global", "sslVersion", "TLSv12:!SSLv3"));
# Certs directory must be in the modpath, i.e. at the same level as the
# FHEM directory
my $mp = AttrVal("global", "modpath", ".");
@@ -90,8 +94,7 @@ TcpServer_Accept($$)
SSL_server => 1,
SSL_key_file => "$mp/certs/server-key.pem",
SSL_cert_file => "$mp/certs/server-cert.pem",
#SSL_version => 'SSLv23:!SSLv3:!SSLv2', #Forum #27565
SSL_version => 'TLSv12:!SSLv3', # Forum #35004
SSL_version => $sslVersion,
SSL_cipher_list => 'HIGH:!RC4:!eNULL:!aNULL',
Timeout => 4,
});