Fix ciphersuite list to enforce low priority for RC4.

98a9092a · Bodo Möller · 87108f5a · 98a9092a
隐藏空白更改
内联并排

Showing with 1 addition and 1 deletion

ssl/ssl.h ssl/ssl.h +1 -1

未找到文件。
--- a/ssl/ssl.h
+++ b/ssl/ssl.h
@@ -269,7 +269,7 @@ extern "C" {
 /* The following cipher list is used by default.
 * It also is substituted when an application-defined cipher list string
 * starts with 'DEFAULT'. */
-#define SSL_DEFAULT_CIPHER_LIST	"ALL:!ADH:RC4:@STRENGTH"
+#define SSL_DEFAULT_CIPHER_LIST	"ALL:!ADH:+RC4:@STRENGTH" /* low priority for RC4 */

 /* Used in SSL_set_shutdown()/SSL_get_shutdown(); */
 #define SSL_SENT_SHUTDOWN	1