ECDHE ciphersuites take precendence to plain DHE

diff --git a/lib/gnutls_priority.c b/lib/gnutls_priority.c
index 22641bf1ee8afd47d9056ee8783cf62315fed501..7d071ecbbafb236a1fc1076348e42bb8d620d83c 100644 (file)
--- a/lib/gnutls_priority.c
+++ b/lib/gnutls_priority.c
@@ -285,10 +285,10 @@ static const int kx_priority_secure[] = {
   /* The ciphersuites that offer forward secrecy take
    * precendance
    */
-  GNUTLS_KX_DHE_RSA,
-  GNUTLS_KX_DHE_DSS,
   GNUTLS_KX_ECDHE_ECDSA,
   GNUTLS_KX_ECDHE_RSA,
+  GNUTLS_KX_DHE_RSA,
+  GNUTLS_KX_DHE_DSS,
   GNUTLS_KX_RSA,
   /* GNUTLS_KX_ANON_DH: Man-in-the-middle prone, don't add!
    * GNUTLS_KX_RSA_EXPORT: Deprecated, don't add!