joyent/node — Issue #2066: tls.Server() ignores user-supplied cipher list
Author: markcohen
Created: 2011-11-10 13:15:38+00:00
State: open

### v0.6.0 - Windows - x86 - VS2010

[[v0.6.0 tls.js line 859](https://github.com/joyent/node/blob/v0.6.0/lib/tls.js#L859)] sets the ssl_ctx cipher list to *RC4-SHA:AES128-SHA:AES256-SHA*

This has at least 2 side effects:

1. It overrides any user-supplied cipher list in the high-level createServer() functions
2. It causes HTTPS/TLS servers initiated with ECC or DH keys to silently barf on the SSL handshake, leaving users with the no-fun job of debugging the SSL protocol :)