diff --git a/src/ripple/basics/impl/make_SSLContext.cpp b/src/ripple/basics/impl/make_SSLContext.cpp index fcd4a1541b..7a47a69b35 100644 --- a/src/ripple/basics/impl/make_SSLContext.cpp +++ b/src/ripple/basics/impl/make_SSLContext.cpp @@ -36,7 +36,7 @@ namespace detail { // detection/prevention, we also have websocket and rpc scenarios // and want to ensure weak ciphers can't be used. char const defaultCipherList[] = - "HIGH:!aNULL:!MD5:!DSS:!SHA1:!3DES:!RC4:!EXPORT:!DSS"; + "HIGH:MEDIUM:!aNULL:!MD5:!DSS:!3DES:!RC4:!EXPORT"; template struct custom_delete; diff --git a/src/ripple/server/impl/SSLHTTPPeer.h b/src/ripple/server/impl/SSLHTTPPeer.h index 847f00b47f..a44f35596b 100644 --- a/src/ripple/server/impl/SSLHTTPPeer.h +++ b/src/ripple/server/impl/SSLHTTPPeer.h @@ -132,7 +132,7 @@ do_handshake(yield_context do_yield) return this->fail(ec, "handshake"); bool const http = this->port().protocol.count("peer") > 0 || - //port().protocol.count("wss") > 0 || + this->port().protocol.count("wss") > 0 || this->port().protocol.count("wss2") > 0 || this->port().protocol.count("https") > 0; if(http)