From 0dded12bc785c3c27d09ec5b789bf956906cb164 Mon Sep 17 00:00:00 2001
From: Jaakko Keränen <jaakko.keranen@iki.fi>
Date: Fri, 26 Feb 2021 11:50:33 +0200
Subject: Set list of used TLS ciphers

IssueID #122
---
 src/main.c | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'src')

diff --git a/src/main.c b/src/main.c
index 49487bbf..21c648ba 100644
--- a/src/main.c
+++ b/src/main.c
@@ -37,6 +37,7 @@ SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */
 #endif
 
 #include <the_Foundation/commandline.h>
+#include <the_Foundation/tlsrequest.h>
 #include <SDL.h>
 #include <stdio.h>
 #include <signal.h>
@@ -58,6 +59,13 @@ int main(int argc, char **argv) {
     mpg123_init();
 #endif
     init_Foundation();
+    /* IssueID #122: Recommended set of TLS ciphers for Gemini */
+    setCiphers_TlsRequest("ECDHE-ECDSA-AES256-GCM-SHA384:"
+                          "ECDHE-ECDSA-CHACHA20-POLY1305:"
+                          "ECDHE-ECDSA-AES128-GCM-SHA256:"
+                          "ECDHE-RSA-AES256-GCM-SHA384:"
+                          "ECDHE-RSA-CHACHA20-POLY1305:"
+                          "ECDHE-RSA-AES128-GCM-SHA256");
     SDL_SetHint(SDL_HINT_VIDEO_ALLOW_SCREENSAVER, "1");
     SDL_SetHint(SDL_HINT_MAC_CTRL_CLICK_EMULATE_RIGHT_CLICK, "1");
     if (SDL_Init(SDL_INIT_VIDEO | SDL_INIT_AUDIO | SDL_INIT_TIMER)) {
-- 
cgit v1.2.3