netty/netty — pull request #3183 by grahamedgecombe (2014-11-26 19:34:15+00:00)
Title: Use Triple DES in JdkSslContext cipher suite list.

JdkSslContext used SSL_RSA_WITH_DES_CBC_SHA in its cipher suite list - meaning it was out of sync with OpenSslServerContext (which uses DES-CBC3-SHA in the same place) and used DES, which is weak. This pull request replaces it with SSL_RSA_WITH_3DES_EDE_CBC_SHA to keep the lists in sync and uses Triple DES, which is stronger than DES.

I've tested this PR with openssl s_client and it fixes the problem. (`openssl s_client -tls1 -cipher DES -connect localhost:8992` fails and `openssl s_client -tls1 -cipher DES3 -connect localhost:8992` succeeds. When JdkSslContext was used, the reverse was true before the fix.)