From f02f44ad3f759cdf200ea53f41f98ac453e6e3c4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pawe=C5=82=20Chmielowski?= <pchmielowski@process-one.net>
Date: Fri, 7 Dec 2018 14:38:54 +0100
Subject: [PATCH] Change default ciphers to intermediate

---
 ejabberd.yml.example | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/ejabberd.yml.example b/ejabberd.yml.example
index 5b2515e08..66d65450c 100644
--- a/ejabberd.yml.example
+++ b/ejabberd.yml.example
@@ -52,7 +52,10 @@ define_macro:
     - "no_sslv2"
     - "no_sslv3"
     - "no_tlsv1"
-    - "no_tlsv1.1"
+    - "no_tlsv1_1"
+
+c2s_ciphers: CIPHERS_INTERMEDIATE
+c2s_protocol_options: PROTOCOL_OPTIONS_INTERMEDIATE
 
 listen:
   -
@@ -62,8 +65,6 @@ listen:
     max_stanza_size: 262144
     shaper: c2s_shaper
     access: c2s
-    ciphers: CIPHERS_MODERN
-    protocol_options: PROTOCOL_OPTIONS_MODERN
     starttls_required: true
   -
     port: 5269
@@ -81,8 +82,8 @@ listen:
       "/ws": ejabberd_http_ws
     web_admin: true
     captcha: true
-    ciphers: CIPHERS_MODERN
-    protocol_options: PROTOCOL_OPTIONS_MODERN
+    ciphers: CIPHERS_INTERMEDIATE
+    protocol_options: PROTOCOL_OPTIONS_INTERMEDIATE
     tls: true
 
 s2s_use_starttls: optional