90e381
From b83be8b4f86bf1a8a6de4802a9486d084c4a46cd Mon Sep 17 00:00:00 2001
90e381
From: Martin Sehnoutka <msehnout@redhat.com>
90e381
Date: Tue, 29 Aug 2017 10:32:16 +0200
90e381
Subject: [PATCH 40/59] Use system wide crypto policy
90e381
9b0ebb
Resolves: rhbz#
90e381
---
90e381
 tunables.c | 3 +--
90e381
 1 file changed, 1 insertion(+), 2 deletions(-)
90e381
90e381
diff --git a/tunables.c b/tunables.c
90e381
index 5440c00..354251c 100644
90e381
--- a/tunables.c
90e381
+++ b/tunables.c
90e381
@@ -297,8 +297,7 @@ tunables_load_defaults()
90e381
   install_str_setting(0, &tunable_dsa_cert_file);
90e381
   install_str_setting(0, &tunable_dh_param_file);
90e381
   install_str_setting(0, &tunable_ecdh_param_file);
9b0ebb
-  install_str_setting("AES128-SHA:DES-CBC3-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA",
9b0ebb
-                      &tunable_ssl_ciphers);
90e381
+  install_str_setting("PROFILE=SYSTEM", &tunable_ssl_ciphers);
90e381
   install_str_setting(0, &tunable_rsa_private_key_file);
90e381
   install_str_setting(0, &tunable_dsa_private_key_file);
90e381
   install_str_setting(0, &tunable_ca_certs_file);
90e381
-- 
90e381
2.14.4
90e381