esl/ejabberd — pull request #121 by arcusfelis (2013-11-12 11:02:09+00:00)
Title: Delete weak ciphers and disable SSL2

This PR does not do much on my computer with OpenSSL v1.0.1e

Before
=====

SSL 2.0 is not supported.

SSL 3.0 ciphers:
['SSL_RSA_WITH_3DES_EDE_CBC_SHA','SSL_RSA_WITH_DES_CBC_SHA','SSL_RSA_WITH_RC4_128_SHA',
'SSL_RSA_WITH_RC4_128_MD5']

TLS 1.0
['RSA_WITH_SEED_CBC_SHA',
'TLS_RSA_WITH_CAMELLIA_256_CBC_SHA',
'TLS_RSA_WITH_CAMELLIA_128_CBC_SHA',
'TLS_RSA_WITH_AES_256_CBC_SHA',
'TLS_RSA_WITH_AES_128_CBC_SHA',
'TLS_RSA_WITH_3DES_EDE_CBC_SHA',
'TLS_RSA_WITH_DES_CBC_SHA',
'TLS_RSA_WITH_RC4_128_SHA',
'TLS_RSA_WITH_RC4_128_MD5']

After
====

SSL 2.0 is not supported.

SSL 3.0 ciphers:
['SSL_RSA_WITH_3DES_EDE_CBC_SHA','SSL_RSA_WITH_RC4_128_SHA','SSL_RSA_WITH_RC4_128_MD5']

Deleted ciphers:
['SSL_RSA_WITH_DES_CBC_SHA']

TLS 1.0 ciphers:
['TLS_RSA_WITH_SEED_CBC_SHA',
'TLS_RSA_WITH_CAMELLIA_256_CBC_SHA',
'TLS_RSA_WITH_CAMELLIA_128_CBC_SHA',
'TLS_RSA_WITH_AES_256_CBC_SHA',
'TLS_RSA_WITH_AES_128_CBC_SHA',
'TLS_RSA_WITH_3DES_EDE_CBC_SHA',
'TLS_RSA_WITH_RC4_128_SHA',
'TLS_RSA_WITH_RC4_128_MD5']

Deleted ciphers:
['TLS_RSA_WITH_DES_CBC_SHA']