Subject: Disable weak ciphers

Disable RC4, "export ciphers", and all keys < 128 bits.

Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/w3m/+bug/1325674
---
 url.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/url.c b/url.c
index ed6062e..e86b1f3 100644
--- a/url.c
+++ b/url.c
@@ -326,6 +326,7 @@ openSSLHandle(int sock, char *hostname, char **p_cert)
 	SSL_load_error_strings();
 	if (!(ssl_ctx = SSL_CTX_new(SSLv23_client_method())))
 	    goto eend;
+	SSL_CTX_set_cipher_list(ssl_ctx, "DEFAULT:!LOW:!RC4:!EXP");
 	option = SSL_OP_ALL;
 	if (ssl_forbid_method) {
 	    if (strchr(ssl_forbid_method, '2'))
-- 
2.6.4

ae204b994300452571f2c9e86d7dc6b83f627'/><select name='h' onchange='this.form.submit();'>
<option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=40cae204b994300452571f2c9e86d7dc6b83f627'>refs</a><a class='active' href='/guix/log/gnu/packages/uml.scm'>log</a><a href='/guix/tree/gnu/packages/uml.scm?id=40cae204b994300452571f2c9e86d7dc6b83f627'>tree</a><a href='/guix/commit/gnu/packages/uml.scm?id=40cae204b994300452571f2c9e86d7dc6b83f627'>commit</a><a href='/guix/diff/gnu/packages/uml.scm?id=40cae204b994300452571f2c9e86d7dc6b83f627'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/uml.scm'>
<input type='hidden' name='id' value='40cae204b994300452571f2c9e86d7dc6b83f627'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=40cae204b994300452571f2c9e86d7dc6b83f627'>root</a>/<a href='/guix/log/gnu?id=40cae204b994300452571f2c9e86d7dc6b83f627'>gnu</a>/<a href='/guix/log/gnu/packages?id=40cae204b994300452571f2c9e86d7dc6b83f627'>packages</a>/<a href='/guix/log/gnu/packages/uml.scm?id=40cae204b994300452571f2c9e86d7dc6b83f627'>uml.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/uml.scm?id=40cae204b994300452571f2c9e86d7dc6b83f627&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2020-01-19 17:57:08 +0100'>2020-01-19</span></td><td><a href='/guix/commit/gnu/packages/uml.scm?id=b2e213c3e9c58dc9539a29dcb152fe20df767281'>gnu: plantuml: Use HTTPS home page.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/uml.scm (plantuml)[home-page]: Use HTTPS.
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>