Remove RC4 cipher suites from SSLContext::DEFAULT_PARAMS

This commit removes insecure RC4 ciper suites [1] from being used by default. If needed, users can still specify the usage of it by specifying it explicitly. [1]: https://tools.ietf.org/html/rfc7465
ruby · Jul 4, 2016 · cb3b838 · cb3b838
1 parent 4a34a97
commit cb3b838
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/lib/openssl/ssl.rb b/lib/openssl/ssl.rb
@@ -50,9 +50,6 @@ class SSLContext
           AES256-SHA256
           AES128-SHA
           AES256-SHA
-          ECDHE-ECDSA-RC4-SHA
-          ECDHE-RSA-RC4-SHA
-          RC4-SHA
         }.join(":"),
         :options => -> {
           opts = OpenSSL::SSL::OP_ALL