From: Simon Ruderich Date: Mon, 6 Jan 2014 00:50:42 +0000 (+0100) Subject: Disable RC4. X-Git-Url: https://ruderich.org/simon/gitweb/?a=commitdiff_plain;p=tlsproxy%2Ftlsproxy.git Disable RC4. --- diff --git a/src/tlsproxy.h b/src/tlsproxy.h index 7bd573b..af58ff2 100644 --- a/src/tlsproxy.h +++ b/src/tlsproxy.h @@ -57,6 +57,8 @@ "SECURE" \ /* Lower priority of SHA-1, user better hashes if possible. */ \ ":-SHA1:+SHA1" \ + /* No RC4, it's broken. */ \ + ":-ARCFOUR-40:-ARCFOUR-128" \ /* Force safe renegotiations. Shouldn't cause any problems as this \ * option only affects the server side (with GnuTLS defaults) and the \ * local clients most-likely already support safe renegotiations (old \