From: Nikos Mavrogiannopoulos Date: Mon, 31 May 2004 20:05:42 +0000 (+0000) Subject: ciphers are sorted according to a strength order. X-Git-Tag: gnutls_1_1_11~55 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=74090f0c9bfc9929dae97f6be3439edad3d2bcaa;p=thirdparty%2Fgnutls.git ciphers are sorted according to a strength order. --- diff --git a/src/cli.c b/src/cli.c index 3b3abfe5d9..1e64098a3c 100644 --- a/src/cli.c +++ b/src/cli.c @@ -85,13 +85,14 @@ static gnutls_certificate_credentials xcred; int protocol_priority[PRI_MAX] = { GNUTLS_TLS1_1, GNUTLS_TLS1_0, GNUTLS_SSL3, 0 }; int kx_priority[PRI_MAX] = - { GNUTLS_KX_RSA, GNUTLS_KX_DHE_DSS, GNUTLS_KX_DHE_RSA, GNUTLS_KX_SRP, - /* Do not use anonymous authentication, unless you know what that means */ - GNUTLS_KX_ANON_DH, GNUTLS_KX_RSA_EXPORT, 0 + { GNUTLS_KX_DHE_RSA, GNUTLS_KX_DHE_DSS, GNUTLS_KX_SRP_RSA, GNUTLS_KX_SRP_DSS, + GNUTLS_KX_RSA, GNUTLS_KX_SRP, + /* Do not use anonymous authentication, unless you know what that means */ + GNUTLS_KX_RSA_EXPORT, GNUTLS_KX_ANON_DH, 0 }; int cipher_priority[PRI_MAX] = - { GNUTLS_CIPHER_ARCFOUR_128, GNUTLS_CIPHER_AES_128_CBC, - GNUTLS_CIPHER_3DES_CBC, GNUTLS_CIPHER_AES_256_CBC, + { GNUTLS_CIPHER_AES_256_CBC, GNUTLS_CIPHER_AES_128_CBC, + GNUTLS_CIPHER_3DES_CBC, GNUTLS_CIPHER_ARCFOUR_128, GNUTLS_CIPHER_ARCFOUR_40, 0 }; int comp_priority[PRI_MAX] = { GNUTLS_COMP_ZLIB, GNUTLS_COMP_NULL, 0 };