Allow configuring the OpenSSL security level, see https://docs.openssl.org/master/man3/SSL_CTX_set_security_level/#default-callback-behaviour for further details.

1 files changed, 5 insertions, 0 deletions

diff --git a/config.c b/config.c
index 938b597..2a8db43 100644
--- a/config.c
+++ b/config.c
@@ -406,6 +406,11 @@ int createconfigfile(char *filename) {
   "# If clienttls = \"0\" then this need not be set\n"
   "#keyfile = \"/home/foo/.blabouncer/key.pem\"\n"
   "\n"
+  "# OpenSSL security level, from 0 to 5 at the time of writing, left at the OpenSSL default if undefined,\n"
+  "# see https://docs.openssl.org/master/man3/SSL_CTX_set_security_level/#default-callback-behaviour\n"
+  "# for further details\n"
+  "#sslseclevel = \"2\"\n"
+  "\n"
   "# Enable logging (\"1\" for yes or \"0\" for no)\n"
   "# Logs go to basedir/logs/ with one file per channel/nick\n"
   "logging = \"1\"\n"