From: Bodo Möller Date: Wed, 14 Jun 2006 13:52:49 +0000 (+0000) Subject: Make sure that AES ciphersuites get priority over Camellia ciphersuites X-Git-Tag: OpenSSL_0_9_8c~25 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=b610f46baea62ea01bc6c36470fb9f15b19ce334;p=openssl Make sure that AES ciphersuites get priority over Camellia ciphersuites in the default cipher string. --- diff --git a/ssl/ssl.h b/ssl/ssl.h index 66e9a4d6c4..83f1fee804 100644 --- a/ssl/ssl.h +++ b/ssl/ssl.h @@ -109,7 +109,7 @@ * */ /* ==================================================================== - * Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved. + * Copyright (c) 1998-2006 The OpenSSL Project. All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions @@ -316,7 +316,11 @@ extern "C" { /* The following cipher list is used by default. * It also is substituted when an application-defined cipher list string * starts with 'DEFAULT'. */ -#define SSL_DEFAULT_CIPHER_LIST "ALL:!ADH:+RC4:@STRENGTH" /* low priority for RC4 */ +#ifdef OPENSSL_NO_CAMELLIA +# define SSL_DEFAULT_CIPHER_LIST "ALL:!ADH:+RC4:@STRENGTH" /* low priority for RC4 */ +#else +# define SSL_DEFAULT_CIPHER_LIST "AES:CAMELLIA:-ECCdraft:ALL:!ADH:+RC4:@STRENGTH" /* low priority for RC4 */ +#endif /* Used in SSL_set_shutdown()/SSL_get_shutdown(); */ #define SSL_SENT_SHUTDOWN 1