From 7271547cb46a4dc28004febaea19e5edaa2250d2 Mon Sep 17 00:00:00 2001 From: Kamil Dudka Date: Tue, 22 Aug 2017 17:02:26 +0200 Subject: [PATCH] openssl: utilize system wide crypto policies ... unless explicitly overridden via libcurl API --- lib/vtls/openssl.h | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/lib/vtls/openssl.h b/lib/vtls/openssl.h index b9648d5..48036e1 100644 --- a/lib/vtls/openssl.h +++ b/lib/vtls/openssl.h @@ -119,8 +119,7 @@ bool Curl_ossl_cert_status_request(void); #endif #define curlssl_cert_status_request() Curl_ossl_cert_status_request() -#define DEFAULT_CIPHER_SELECTION \ - "ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH" +#define DEFAULT_CIPHER_SELECTION "PROFILE=SYSTEM" #endif /* USE_OPENSSL */ #endif /* HEADER_CURL_SSLUSE_H */ -- 2.9.5