diff --git a/src/security/tls_session.cpp b/src/security/tls_session.cpp index b6f0d5fa73917ff70d0d728ecc9861410cb6f174..79d2ce9279299e83d4d1d408a5922876bb20b4af 100644 --- a/src/security/tls_session.cpp +++ b/src/security/tls_session.cpp @@ -39,7 +39,7 @@ namespace ring { namespace tls { static constexpr int DTLS_MTU {1400}; // limit for networks like ADSL -static constexpr const char* TLS_PRIORITY_STRING {"SECURE192:-VERS-TLS-ALL:+VERS-DTLS-ALL:%SERVER_PRECEDENCE"}; +static constexpr const char* TLS_PRIORITY_STRING {"SECURE192:-RSA:-VERS-TLS-ALL:+VERS-DTLS-ALL:%SERVER_PRECEDENCE"}; static constexpr ssize_t FLOOD_THRESHOLD {4*1024}; static constexpr auto FLOOD_PAUSE = std::chrono::milliseconds(100); // Time to wait after an invalid cookie packet (anti flood attack) static constexpr std::size_t INPUT_MAX_SIZE {1000}; // Maximum packet to store before dropping (pkt size = DTLS_MTU)