Add cipher_list option for setting the allowed TLS cipher suites.

diff --git a/raddb/eap.conf b/raddb/eap.conf
index 4ac2b05..886b02d 100644 (file)
--- a/raddb/eap.conf
+++ b/raddb/eap.conf
@@ -176,6 +176,11 @@
                       #  will fail rejecting the user.
                       #
                #       check_cert_cn = %{User-Name}
+               #
+                       # Set this option to specify the allowed
+                       # TLS cipher suites.  The format is listed
+                       # in "man 1 ciphers".
+               #       cipher_list = "DEFAULT"
                #}
 
                #  The TTLS module implements the EAP-TTLS protocol,