From f2c63f11605aa7a428c5b1e78a7a8e69176cc22d Mon Sep 17 00:00:00 2001 From: Roberto Foglietta Date: Thu, 6 Feb 2014 15:15:16 +0100 Subject: [PATCH 01/17] Aloha 5.5: 1001-default_ciphers.patch modified: ssl/ssl.h --- ssl/ssl.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ssl/ssl.h b/ssl/ssl.h index 593579e..f5641eb 100644 --- a/ssl/ssl.h +++ b/ssl/ssl.h @@ -331,7 +331,7 @@ extern "C" { /* The following cipher list is used by default. * It also is substituted when an application-defined cipher list string * starts with 'DEFAULT'. */ -#define SSL_DEFAULT_CIPHER_LIST "ALL:!aNULL:!eNULL:!SSLv2" +#define SSL_DEFAULT_CIPHER_LIST "AES:RC4:ALL:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2" /* As of OpenSSL 1.0.0, ssl_create_cipher_list() in ssl/ssl_ciph.c always * starts with a reasonable order, and all we have to do for DEFAULT is * throwing out anonymous and unencrypted ciphersuites! -- 1.7.9.5