Added tls_dh_max_bits & check tls_require_ciphers early.

[exim.git] / src / src / globals.h

diff --git a/src/src/globals.h b/src/src/globals.h
index ac6aa15d1cfd2c291a43c8b22eb56c5bbbdd82c5..fbbec3230bb8efde8b236b65899d162ef6737fd8 100644 (file)
--- a/src/src/globals.h
+++ b/src/src/globals.h
@@ -93,6 +93,7 @@ extern uschar *tls_advertise_hosts;    /* host for which TLS is advertised */
 extern uschar *tls_certificate;        /* Certificate file */
 extern uschar *tls_channelbinding_b64; /* string of base64 channel binding */
 extern uschar *tls_crl;                /* CRL File */
+extern int     tls_dh_max_bits;        /* don't accept higher lib suggestions */
 extern uschar *tls_dhparam;            /* DH param file */
 #if defined(EXPERIMENTAL_OCSP) && !defined(USE_GNUTLS)
 extern uschar *tls_ocsp_file;          /* OCSP stapling proof file */