From 93d24bb1144bebedb79bec8745c42aa0dc778aef Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Wed, 16 Jan 2019 08:38:53 +0100
Subject: Preferring system crypto policy.

If we don't call SSL_CTX_set_cipher_list(), then it uses the
system's default.

Link: <https://fedoraproject.org/wiki/Changes/CryptoPolicy>
Link: <https://docs.fedoraproject.org/en-US/packaging-guidelines/CryptoPolicies/>
Link: <https://www.redhat.com/en/blog/consistent-security-crypto-policies-red-hat-enterprise-linux-8>
Signed-off-by: Remi Collet <remi@remirepo.net>
Acked-by: Andrei Belov <defan@nginx.com>
[ alx: add changelog and tweak commit message ]
Signed-off-by: Alejandro Colomar <alx@nginx.com>
---
 docs/changes.xml | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'docs/changes.xml')

diff --git a/docs/changes.xml b/docs/changes.xml
index d1c71fdb..f4e3f65e 100644
--- a/docs/changes.xml
+++ b/docs/changes.xml
@@ -37,6 +37,12 @@ removed $uri auto-append for "share" when loading configuration.
 </para>
 </change>
 
+<change type="change">
+<para>
+prefer system crypto policy, instead of hardcoding a default.
+</para>
+</change>
+
 <change type="feature">
 <para>
 compatibility with PHP 8.2.
-- 
cgit