diff options
| author | Laurent Bercot <ska-skaware@skarnet.org> | 2020-11-21 02:22:09 +0000 |
|---|---|---|
| committer | Laurent Bercot <ska-skaware@skarnet.org> | 2020-11-21 02:22:09 +0000 |
| commit | 5c2880becc94141b8035b3488b6bd60696011308 (patch) | |
| tree | 51e177122b50e248075dae441e4a76d68fd33081 /src/stls/stls_server_init_and_handshake.c | |
| parent | 5715c21a077ee1c2fe8957cb4adcea14fd2eda6b (diff) | |
| download | s6-networking-5c2880becc94141b8035b3488b6bd60696011308.tar.gz | |
Privs can only be dropped after reading key files.
Diffstat (limited to 'src/stls/stls_server_init_and_handshake.c')
| -rw-r--r-- | src/stls/stls_server_init_and_handshake.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/stls/stls_server_init_and_handshake.c b/src/stls/stls_server_init_and_handshake.c index 58d812e..5d9c25c 100644 --- a/src/stls/stls_server_init_and_handshake.c +++ b/src/stls/stls_server_init_and_handshake.c @@ -33,6 +33,8 @@ struct tls *stls_server_init_and_handshake (int const *fds, uint32_t preoptions) if (tls_config_set_key_file(cfg, x) < 0) diecfg(cfg, "tls_config_set_key_file") ; + stls_drop() ; + if (tls_config_set_ciphers(cfg, "secure") < 0) diecfg(cfg, "tls_config_set_ciphers") ; |