Add config option peer_ssl_cipher_list.

src/Config.cpp

@@ -13,6 +13,7 @@
 #define SECTION_RPC_PORT				"rpc_port"
 #define SECTION_VALIDATION_PASSWORD		"validation_password"
 #define SECTION_VALIDATION_KEY			"validation_key"
+#define SECTION_PEER_SSL_CIPHER_LIST	"peer_ssl_cipher_list"
 
 Config theConfig;
 
@@ -34,6 +35,8 @@ Config::Config()
 
 	DATA_DIR				= "db/";
 
+	PEER_SSL_CIPHER_LIST	= DEFAULT_PEER_SSL_CIPHER_LIST;
+
 	TRANSACTION_FEE_BASE	= 1000;
 }
 
@@ -73,6 +76,8 @@ void Config::load()
 
 			(void) sectionSingleB(secConfig, SECTION_VALIDATION_PASSWORD, VALIDATION_PASSWORD);
 			(void) sectionSingleB(secConfig, SECTION_VALIDATION_KEY, VALIDATION_KEY);
+
+			(void) sectionSingleB(secConfig, SECTION_PEER_SSL_CIPHER_LIST, PEER_SSL_CIPHER_LIST);
 		}
 	}
 

src/Config.h

@@ -7,6 +7,9 @@
 
 const int SYSTEM_PEER_PORT=6561;
 
+// Allow anonymous DH.
+#define DEFAULT_PEER_SSL_CIPHER_LIST	"ALL:!LOW:!EXP:!MD5:@STRENGTH"
+
 class Config
 {
 public:
@@ -42,6 +45,8 @@ public:
 	std::string VALIDATION_PASSWORD;
 	std::string VALIDATION_KEY;
 
+	std::string PEER_SSL_CIPHER_LIST;
+
 	// configuration parameters
 	std::string DATA_DIR;