Comment 7 for bug 1414790

Revision history for this message
Maik Zumstrull (m-zumstrull) wrote :

It looks like the fixes you have committed force the clients to use a strongly deprecated cipher suite (RC4-SHA), while being unusually permissive with regards to the protocol version (allowing anything down to SSLv2).

Have you considered enforcing TLS v1.0+ (or even v1.2+) as the protocol, and not forcing a particular cipher suite?