"SECURE" \
/* Lower priority of SHA-1, user better hashes if possible. */ \
":-SHA1:+SHA1" \
+ /* No RC4, it's broken. */ \
+ ":-ARCFOUR-40:-ARCFOUR-128" \
/* Force safe renegotiations. Shouldn't cause any problems as this \
* option only affects the server side (with GnuTLS defaults) and the \
* local clients most-likely already support safe renegotiations (old \