summaryrefslogtreecommitdiffstats
path: root/ssl/ssl.h
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2009-04-08 16:16:35 +0000
committerDr. Stephen Henson <steve@openssl.org>2009-04-08 16:16:35 +0000
commit22c98d4aad76f39ab19e5b63e1448c7d28ca7617 (patch)
tree5fbd0b38a159c7b210b3456707ae7c0f44ca8b06 /ssl/ssl.h
parentcc7399e79cbe45ad363d2a67dd04cb599f9481eb (diff)
Update from 1.0.0-stable
Diffstat (limited to 'ssl/ssl.h')
-rw-r--r--ssl/ssl.h4
1 files changed, 2 insertions, 2 deletions
diff --git a/ssl/ssl.h b/ssl/ssl.h
index d0c42fa1d1..a9d1fa5fcc 100644
--- a/ssl/ssl.h
+++ b/ssl/ssl.h
@@ -324,8 +324,8 @@ extern "C" {
/* The following cipher list is used by default.
* It also is substituted when an application-defined cipher list string
* starts with 'DEFAULT'. */
-#define SSL_DEFAULT_CIPHER_LIST "ALL:!aNULL:!eNULL"
-/* As of OpenSSL 0.9.9, ssl_create_cipher_list() in ssl/ssl_ciph.c always
+#define SSL_DEFAULT_CIPHER_LIST "ALL:!aNULL:!eNULL:!SSlv2"
+/* As of OpenSSL 1.0.0, ssl_create_cipher_list() in ssl/ssl_ciph.c always
* starts with a reasonable order, and all we have to do for DEFAULT is
* throwing out anonymous and unencrypted ciphersuites!
* (The latter are not actually enabled by ALL, but "ALL:RSA" would enable