From f98143f4d2774dc06b23655fd369075247aab4e9 Mon Sep 17 00:00:00 2001 From: Andreas Kotes Date: Tue, 15 Apr 2014 13:33:13 +0200 Subject: disable RC4 explicitly --- vchat-ssl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vchat-ssl.c b/vchat-ssl.c index 986187f..e571d85 100755 --- a/vchat-ssl.c +++ b/vchat-ssl.c @@ -72,7 +72,7 @@ SSL_CTX * vc_create_sslctx( vc_x509store_t *vc_store ) store = NULL; /* Disable some insecure protocols explicitly */ SSL_CTX_set_options(ctx, SSL_OP_ALL|SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3); - SSL_CTX_set_cipher_list(ctx, "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH"); + SSL_CTX_set_cipher_list(ctx, "ALL:!ADH:!LOW:!EXP:!MD5:!RC4:@STRENGTH"); SSL_CTX_set_verify_depth (ctx, 2); -- cgit v1.2.3