--- openssl/ssl/ssl.h	Wed Jan  6 18:59:40 2010
+++ openssl/ssl/ssl.h	Wed Mar 10 15:47:20 2010
@@ -319,7 +319,7 @@
 /* The following cipher list is used by default.
  * It also is substituted when an application-defined cipher list string
  * starts with 'DEFAULT'. */
-#define SSL_DEFAULT_CIPHER_LIST	"AES:ALL:!aNULL:!eNULL:+RC4:@STRENGTH" /* low priority for RC4 */
+#define SSL_DEFAULT_CIPHER_LIST	"AES:ALL:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2:@STRENGTH" 
 
 /* Used in SSL_set_shutdown()/SSL_get_shutdown(); */
 #define SSL_SENT_SHUTDOWN	1