basho/riak_api — pull request #46 by Vagabond (2013-12-08 17:20:25+00:00)
Title: Honor configured cipher suites and add an option to honor the order

In additional to using the cipher suites configured in riak_core, you can also tell OTP to prefer the *order* in which the cipher suite is listed in Riak, over any client preferences. This is more secure as it allows the server to order the ciphers such that it can put the ciphers with the attributes it values the most at the top of the list, but list others for compatability.

This new option, as it is only available in a patched OTP, can only be passed to the SSL api if it is being enabled. To avoid crashing Riak built with unpatched VMs, cuttlefish will automatically switch this option off on non-patched VMs.

See also basho/riak_core#469