aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--usr.sbin/rpc.tlsservd/rpc.tlsservd.c7
1 files changed, 4 insertions, 3 deletions
diff --git a/usr.sbin/rpc.tlsservd/rpc.tlsservd.c b/usr.sbin/rpc.tlsservd/rpc.tlsservd.c
index bbcdba319353..be81b1bab1fc 100644
--- a/usr.sbin/rpc.tlsservd/rpc.tlsservd.c
+++ b/usr.sbin/rpc.tlsservd/rpc.tlsservd.c
@@ -237,6 +237,7 @@ main(int argc, char **argv)
break;
default:
fprintf(stderr, "usage: %s "
+ "[-C/--ciphers available_ciphers] "
"[-D/--certdir certdir] [-d/--debuglevel] "
"[-h/--checkhost] "
"[-l/--verifylocs CAfile] [-m/--mutualverf] "
@@ -570,14 +571,14 @@ rpctls_setup_ssl(const char *certdir)
if (rpctls_ciphers != NULL) {
/*
- * Set preferred ciphers, since KERN_TLS only supports a
+ * Set available ciphers, since KERN_TLS only supports a
* few of them. Normally, not doing this should be ok,
* since the library defaults will work.
*/
- ret = SSL_CTX_set_cipher_list(ctx, rpctls_ciphers);
+ ret = SSL_CTX_set_ciphersuites(ctx, rpctls_ciphers);
if (ret == 0) {
rpctls_verbose_out("rpctls_setup_ssl: "
- "SSL_CTX_set_cipher_list failed: %s\n",
+ "SSL_CTX_set_ciphersuites failed: %s\n",
rpctls_ciphers);
SSL_CTX_free(ctx);
return (NULL);