ciphers are sorted according to a strength order.

diff --git a/src/cli.c b/src/cli.c
index 3b3abfe5d9c63c65f975dd9327cb06c0d1d3ce5d..1e64098a3c6761920fedb50ced3d9a16810adec5 100644 (file)
--- a/src/cli.c
+++ b/src/cli.c
@@ -85,13 +85,14 @@ static gnutls_certificate_credentials xcred;
 int protocol_priority[PRI_MAX] =
     { GNUTLS_TLS1_1, GNUTLS_TLS1_0, GNUTLS_SSL3, 0 };
 int kx_priority[PRI_MAX] =
-    { GNUTLS_KX_RSA, GNUTLS_KX_DHE_DSS, GNUTLS_KX_DHE_RSA, GNUTLS_KX_SRP,
-       /* Do not use anonymous authentication, unless you know what that means */
-       GNUTLS_KX_ANON_DH, GNUTLS_KX_RSA_EXPORT, 0
+    { GNUTLS_KX_DHE_RSA, GNUTLS_KX_DHE_DSS, GNUTLS_KX_SRP_RSA, GNUTLS_KX_SRP_DSS, 
+    GNUTLS_KX_RSA, GNUTLS_KX_SRP,
+    /* Do not use anonymous authentication, unless you know what that means */
+    GNUTLS_KX_RSA_EXPORT, GNUTLS_KX_ANON_DH, 0
 };
 int cipher_priority[PRI_MAX] =
-    { GNUTLS_CIPHER_ARCFOUR_128, GNUTLS_CIPHER_AES_128_CBC,
-       GNUTLS_CIPHER_3DES_CBC, GNUTLS_CIPHER_AES_256_CBC,
+    { GNUTLS_CIPHER_AES_256_CBC, GNUTLS_CIPHER_AES_128_CBC,
+       GNUTLS_CIPHER_3DES_CBC, GNUTLS_CIPHER_ARCFOUR_128,
        GNUTLS_CIPHER_ARCFOUR_40, 0
 };
 int comp_priority[PRI_MAX] = { GNUTLS_COMP_ZLIB, GNUTLS_COMP_NULL, 0 };