ensure that, for each strength, RC4 ciphers have least preference

in the default ciphersuite list

diff --git a/ssl/ssl.h b/ssl/ssl.h
index ba9dc4a..e90b850 100644 (file)
--- a/ssl/ssl.h
+++ b/ssl/ssl.h
@@ -269,7 +269,7 @@ extern "C" {
 /* The following cipher list is used by default.
  * It also is substituted when an application-defined cipher list string
  * starts with 'DEFAULT'. */
 /* The following cipher list is used by default.
  * It also is substituted when an application-defined cipher list string
  * starts with 'DEFAULT'. */

-#define SSL_DEFAULT_CIPHER_LIST        "ALL:!ADH:@STRENGTH"
+#define SSL_DEFAULT_CIPHER_LIST        "ALL:!ADH:RC4:@STRENGTH"

 
 /* Used in SSL_set_shutdown()/SSL_get_shutdown(); */
 #define SSL_SENT_SHUTDOWN      1
 
 /* Used in SSL_set_shutdown()/SSL_get_shutdown(); */
 #define SSL_SENT_SHUTDOWN      1