From 9801e4d851bb027a2b8609d87e77ee79f5d689ad Mon Sep 17 00:00:00 2001 From: jsing <> Date: Wed, 13 Jul 2016 16:35:47 +0000 Subject: [PATCH] Adjust existing tls_config_set_cipher() callers for TLS cipher group changes - map the previous configuration to the equivalent in the new groups. This will be revisited post release. Discussed with beck@ --- src/usr.sbin/ntpd/constraint.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/usr.sbin/ntpd/constraint.c b/src/usr.sbin/ntpd/constraint.c index e2df6c63..13787612 100644 --- a/src/usr.sbin/ntpd/constraint.c +++ b/src/usr.sbin/ntpd/constraint.c @@ -1,4 +1,4 @@ -/* $OpenBSD: constraint.c,v 1.29 2016/06/01 16:35:58 deraadt Exp $ */ +/* $OpenBSD: constraint.c,v 1.30 2016/07/13 16:35:47 jsing Exp $ */ /* * Copyright (c) 2015 Reyk Floeter @@ -818,7 +818,7 @@ httpsdate_init(const char *addr, const char *port, const char *hostname, if ((httpsdate->tls_config = tls_config_new()) == NULL) goto fail; - if (tls_config_set_ciphers(httpsdate->tls_config, "compat") != 0) + if (tls_config_set_ciphers(httpsdate->tls_config, "all") != 0) goto fail; if (ca == NULL || ca_len == 0)