From: Bodo Möller <bodo@openssl.org>
Date: Tue, 20 Feb 2007 16:39:58 +0000 (+0000)
Subject: SSL_kKRB5 ciphersuites shouldn't be preferred by default
X-Git-Tag: OpenSSL_0_9_8k^2~964
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=114c9c36b1a36ee115164d58249361d185194f32;p=oweals%2Fopenssl.git

SSL_kKRB5 ciphersuites shouldn't be preferred by default
---

diff --git a/ssl/ssl_ciph.c b/ssl/ssl_ciph.c
index fdfc0e8117..666d44d34a 100644
--- a/ssl/ssl_ciph.c
+++ b/ssl/ssl_ciph.c
@@ -1196,6 +1196,7 @@ STACK_OF(SSL_CIPHER) *ssl_create_cipher_list(const SSL_METHOD *ssl_method,
 	/* ssl_cipher_apply_rule(0, 0, SSL_aDH, 0, 0, 0, 0, CIPHER_ORD, -1, &head, &tail); */
 	ssl_cipher_apply_rule(0, SSL_kRSA, 0, 0, 0, 0, 0, CIPHER_ORD, -1, &head, &tail);
 	ssl_cipher_apply_rule(0, SSL_kPSK, 0,0, 0, 0, 0, CIPHER_ORD, -1, &head, &tail);
+	ssl_cipher_apply_rule(0, SSL_kKRB5, 0,0, 0, 0, 0, CIPHER_ORD, -1, &head, &tail);
 
 	/* RC4 is sort-of broken -- move the the end */
 	ssl_cipher_apply_rule(0, 0, 0, SSL_RC4, 0, 0, 0, CIPHER_ORD, -1, &head, &tail);