From acf2aa470032fbb1738912a63e2cb361e101af26 Mon Sep 17 00:00:00 2001 From: Mikaela Suomalainen Date: Tue, 16 Sep 2014 13:57:08 +0300 Subject: [PATCH] modules/sasl: disable DH-BLOWFISH & AES by default Atheme has dropped them in their git version. https://github.com/atheme/atheme/commit/15f6d84 I would also like EXTERNAL to be trid by default, but \*Cert and \*CertFP aren't so used and that wouldn't probably be accepted. --- modules/sasl.cpp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/sasl.cpp b/modules/sasl.cpp index 452726ff..8eae4f9f 100644 --- a/modules/sasl.cpp +++ b/modules/sasl.cpp @@ -28,8 +28,8 @@ static const struct { } SupportedMechanisms[] = { { "EXTERNAL", "TLS certificate, for use with the *cert module", false }, #ifdef HAVE_SASL_MECHANISM - { "DH-BLOWFISH", "Secure negotiation using the DH-BLOWFISH mechanism", true }, - { "DH-AES", "More secure negotiation using the DH-AES mechanism", true }, + { "DH-BLOWFISH", "Secure negotiation using the DH-BLOWFISH mechanism", false }, + { "DH-AES", "More secure negotiation using the DH-AES mechanism", false }, #endif { "PLAIN", "Plain text negotiation", true }, { NULL, NULL, false }