diff --git a/lib/modules/Protocols.pmod/HTTP.pmod/Query.pike b/lib/modules/Protocols.pmod/HTTP.pmod/Query.pike index 6d7ece2888b1bb949b8e167ef35565cabc27e3ab..5249d0491d53b8804e4f592df05dd9c0c58224ed 100644 --- a/lib/modules/Protocols.pmod/HTTP.pmod/Query.pike +++ b/lib/modules/Protocols.pmod/HTTP.pmod/Query.pike @@ -196,18 +196,11 @@ protected void connect(string server,int port,int blocking) // Create a context SSL.context context = SSL.context(); // Allow only strong crypto - context->preferred_suites = ({ - //Strong ciphersuites. - SSL_rsa_with_idea_cbc_sha, - SSL_rsa_with_rc4_128_sha, - SSL_rsa_with_rc4_128_md5, - SSL_rsa_with_3des_ede_cbc_sha, -#if 0 + context->preferred_suites -= ({ //Weaker ciphersuites. SSL_rsa_export_with_rc4_40_md5, SSL_rsa_export_with_rc2_cbc_40_md5, SSL_rsa_export_with_des40_cbc_sha, -#endif /* 0 */ }); context->random = Crypto.Random.random_string;