openSUSE/osc — pull request #7 by crrodriguez (2012-07-16 03:24:35+00:00)
Title: The BEAST is gonna get ya... 

This patch workarounds the BEAST attack in the client side
making OSC to prefer TLS v1.1 or v1.2 ciphers/key exchanges
when available.
Now, as long as openSUSE API webservers do not support
these protocols it will prefer the RC4-SHA1 combination to
be in the safe side.