Roxen.git / server / base_server / global_variables.pike

version» Context lines:

Roxen.git/server/base_server/global_variables.pike:233: Inside #if constant(SSL.Constants.CIPHER_aead)
      // Pike 8.0 or recent Pike 7.8.    // They have SSL.[Cc]ontext()->get_suites().       // 112 bits is the maximum strength to still retain the    // DES-3 suites, which are required in the TLS standards.    defvar("ssl_key_bits",    Variable.Int(112, 0,    LOCALE(0, "Cipher suite minimum strength"),    LOCALE(0, -  "<p>The minimum number of bits to secure " -  "connections.</p>\n" +  "<p>The minimum number of effective bits to " +  "secure connections.</p>\n"    "<p>Common ciphers (subject to availability) " -  "in order of bits:\n" +  "in order of effective bits as of December 2015:\n"    "<dl>\n" -  "<dt>40</dt>\n" -  "<dd>Export DES (aka DES-40)</dd>\n" +  "<dt>24</dt>\n"    "<dd>Export RC4 (aka RC4-40)</dd>\n" -  "<dt>56</dt>\n" +  "<dt>32</dt>\n" +  "<dd>Export DES (aka DES-40)</dd>\n" +  "<dt>38</dt>\n" +  "<dd>RC4</dd>\n" +  "<dt>40</dt>\n"    "<dd>DES</dd>\n"    "<dt>112</dt>\n"    "<dd>3-DES (Note that this cipher is the "    "minimum required cipher in many versions "    "of TLS)</dd>\n"    "<dt>128</dt>\n"    "<dd>AES-128</dd>\n"    "<dd>Camellia-128</dd>\n" -  "<dd>RC4</dd>\n" +     "<dt>256</dt>\n"    "<dd>AES-256</dd>\n"    "<dd>Camellia-256</dd>\n"    "</dl>\n"    "</p>\n"    "<p>Cipher strengths lower than 112 bits are "    "<b>NOT</b> recommended, and there are RFCs that "    "prohibit the use of all those suites.</p>\n")))->    set_range(0, Variable.no_limit);   #endif