From: Bodo Möller <bodo@openssl.org>
Date: Tue, 7 May 2002 08:36:01 +0000 (+0000)
Subject: Fix ciphersuite list to enforce low priority for RC4.
X-Git-Tag: OpenSSL_0_9_7-beta1~68
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=ae936dae90ff9ba0b930f690aeb4942f3e8b5bfa;p=oweals%2Fopenssl.git

Fix ciphersuite list to enforce low priority for RC4.
---

diff --git a/ssl/ssl.h b/ssl/ssl.h
index e90b850c68..833f761690 100644
--- a/ssl/ssl.h
+++ b/ssl/ssl.h
@@ -269,7 +269,7 @@ extern "C" {
 /* The following cipher list is used by default.
  * It also is substituted when an application-defined cipher list string
  * starts with 'DEFAULT'. */
-#define SSL_DEFAULT_CIPHER_LIST	"ALL:!ADH:RC4:@STRENGTH"
+#define SSL_DEFAULT_CIPHER_LIST	"ALL:!ADH:+RC4:@STRENGTH" /* low priority for RC4 */
 
 /* Used in SSL_set_shutdown()/SSL_get_shutdown(); */
 #define SSL_SENT_SHUTDOWN	1