nghttpd: Honor server's cipher preferece order

fef01a3c · Tatsuhiro Tsujikawa · a7eb6502 · fef01a3c
Commit fef01a3c authored Mar 15, 2014 by Tatsuhiro Tsujikawa
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

src/HttpServer.cc src/HttpServer.cc +2 -1

No files found.
--- a/src/HttpServer.cc
+++ b/src/HttpServer.cc
@@ -1246,7 +1246,8 @@ int HttpServer::run()
                        SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_COMPRESSION |
                        SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION |
                        SSL_OP_SINGLE_ECDH_USE |
-                        SSL_OP_NO_TICKET);
+                        SSL_OP_NO_TICKET |
+                        SSL_OP_CIPHER_SERVER_PREFERENCE);
    SSL_CTX_set_mode(ssl_ctx, SSL_MODE_AUTO_RETRY);
    SSL_CTX_set_mode(ssl_ctx, SSL_MODE_RELEASE_BUFFERS);
    SSL_CTX_set_mode(ssl_ctx, SSL_MODE_ENABLE_PARTIAL_WRITE);