--- openssl-1.0.1m.ori/ssl/ssl.h 2015-03-19 14:37:10.000000000 +0100 +++ openssl-1.0.1m/ssl/ssl.h 2015-04-07 13:36:53.898461419 +0200 @@ -334,7 +334,7 @@ * The following cipher list is used by default. It also is substituted when * an application-defined cipher list string starts with 'DEFAULT'. */ -# define SSL_DEFAULT_CIPHER_LIST "ALL:!EXPORT:!aNULL:!eNULL:!SSLv2" +# define SSL_DEFAULT_CIPHER_LIST "AES:RC4:ALL:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2" /* * As of OpenSSL 1.0.0, ssl_create_cipher_list() in ssl/ssl_ciph.c always * starts with a reasonable order, and all we have to do for DEFAULT is