From 631784149d9173cb363f5d1f3a231bf8fc90dd33 Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Wed, 30 Mar 2016 20:48:53 +0900 Subject: Disable RC4 Origin: http://git.savannah.gnu.org/cgit/guix.git/commit/?id=62339e2d493bf87a3aabe12e45458581e9705d83 --- url.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/url.c b/url.c index 1a49cfa..c90cd9f 100644 --- a/url.c +++ b/url.c @@ -327,7 +327,7 @@ openSSLHandle(int sock, char *hostname, char **p_cert) SSL_load_error_strings(); if (!(ssl_ctx = SSL_CTX_new(SSLv23_client_method()))) goto eend; - SSL_CTX_set_cipher_list(ssl_ctx, "DEFAULT:!LOW:!EXP"); + SSL_CTX_set_cipher_list(ssl_ctx, "DEFAULT:!LOW:!RC4:!EXP"); option = SSL_OP_ALL; if (ssl_forbid_method) { if (strchr(ssl_forbid_method, '2')) -- cgit v1.2.3