From 80ec9c990044e6afcaafa3995805cf157a97fe50 Mon Sep 17 00:00:00 2001
From: Moritz Grimm <mgrimm@mrsserver.net>
Date: Wed, 22 Jan 2020 16:42:09 +0100
Subject: [PATCH] Fix and simplify example cipher string

---
 doc/ezstream.1.in.in       | 4 ++--
 examples/ezstream-full.xml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/ezstream.1.in.in b/doc/ezstream.1.in.in
index f05c028..f61b26a 100644
--- a/doc/ezstream.1.in.in
+++ b/doc/ezstream.1.in.in
@@ -232,8 +232,8 @@ active attackers.
 .It Sy \&<tls_cipher_suite\ /\&>
 Configure allowed cipher suites for TLS.
 .Pp
-For example (modern cipher suites, PFS, no deprecated algorithms):
-.Sy HIGH:!kRSA:!kECDH:!DH:!PKS:!aNULL:!eNULL:!3DES:!MD5:!SHA:!TLSv1 .
+For example (modern cipher suites, PFS, TLS 1.2 or better):
+.Sy HIGH:!RSA:!SHA:!DH:!aNULL:!eNULL:!TLSv1 .
 .Pp
 Default:
 .Em libshout default cipher suite
diff --git a/examples/ezstream-full.xml b/examples/ezstream-full.xml
index 8392952..b8040d3 100644
--- a/examples/ezstream-full.xml
+++ b/examples/ezstream-full.xml
@@ -45,7 +45,7 @@
         Configure allowed cipher suites for TLS other than the libshout default.
         See openssl(1)/ciphers(1) for details.
         -->
-      <tls_cipher_suite>HIGH:!kRSA:!kECDH:!DH:!PKS:!aNULL:!eNULL:!3DES:!MD5:!SHA:!TLSv1</tls_cipher_suite>
+      <tls_cipher_suite>HIGH:!RSA:!SHA:!DH:!aNULL:!eNULL:!TLSv1</tls_cipher_suite>
 
       <!--
         Directory to use for server certificate verification in "hash format".