From 6f80ef82fc120408b0b242d35f77dd92213ba318 Mon Sep 17 00:00:00 2001 From: Scott Cantor Date: Wed, 25 Feb 2015 15:54:01 +0000 Subject: [PATCH] https://issues.shibboleth.net/jira/browse/SSPCPP-647 --- xmltooling/soap/impl/CURLSOAPTransport.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/xmltooling/soap/impl/CURLSOAPTransport.cpp b/xmltooling/soap/impl/CURLSOAPTransport.cpp index 241755e..c05184f 100644 --- a/xmltooling/soap/impl/CURLSOAPTransport.cpp +++ b/xmltooling/soap/impl/CURLSOAPTransport.cpp @@ -315,7 +315,7 @@ CURL* CURLPool::get(const SOAPTransport::Address& addr) curl_easy_setopt(handle,CURLOPT_FAILONERROR,1); // This may (but probably won't) help with < 7.20 bug in DNS caching. curl_easy_setopt(handle,CURLOPT_DNS_CACHE_TIMEOUT,120); - curl_easy_setopt(handle,CURLOPT_SSL_CIPHER_LIST,"ALL:!aNULL:!LOW:!EXPORT:!SSLv2"); + curl_easy_setopt(handle,CURLOPT_SSL_CIPHER_LIST,"ALL:!aNULL:!LOW:!EXPORT:!RC4:!SSLv2"); // Verification of the peer is via TrustEngine only. curl_easy_setopt(handle,CURLOPT_SSL_VERIFYPEER,0); curl_easy_setopt(handle,CURLOPT_CAINFO,nullptr); -- 2.1.4