X-Git-Url: https://pwan.org/git/?a=blobdiff_plain;f=certmaster%2FSSLCommon.py;h=c3e76c266837ec66350a5197ef7ee3faf60af382;hb=0c8f2c6861e4a707d388003c6471f3ad841d47b3;hp=e93ff639fa8a0a58c5b01e7bf0d6c834ed00ee09;hpb=c6eb51dbc3be8ef1b97ad66ac5f218d5d48c9ec0;p=certmaster.git

diff --git a/certmaster/SSLCommon.py b/certmaster/SSLCommon.py
index e93ff63..c3e76c2 100644
--- a/certmaster/SSLCommon.py
+++ b/certmaster/SSLCommon.py
@@ -39,6 +39,7 @@ def CreateSSLContext(pkey, cert, ca_cert, passwd_callback=None):
     if passwd_callback:
         ctx.set_passwd_cb = passwd_callback
 
+    ctx.set_cipher_list('ALL:!aNULL:!ADH:!eNULL:!LOW:!MEDIUM:!EXP:RC4+RSA:+HIGH')
     ctx.use_certificate_file(cert)
     ctx.use_privatekey_file(pkey)
     ctx.load_client_ca(ca_cert)
@@ -121,4 +122,3 @@ class HTTPS(httplib.HTTP):
 
     def __init__(self, host='', port=None, ssl_context=None, strict=None, timeout=None):
         self._setup(self._connection_class(host, port, ssl_context, strict, timeout))
-