ssl ciphers - be liberal in what we accept, conservative in what we generate

1 files changed, 7 insertions, 0 deletions

diff --git a/view/en/htconfig.tpl b/view/en/htconfig.tpl
index 840e7a124..8e2d32433 100644
--- a/view/en/htconfig.tpl
+++ b/view/en/htconfig.tpl
@@ -85,6 +85,13 @@ $a->config['system']['php_path'] = '{{$phpath}}';
 
 $a->config['system']['directory_mode']  = DIRECTORY_MODE_NORMAL;
 
+
+// libcurl default ciphers - Redhat and NSS based systems may use a different
+// syntax. This indicates the ciphers we will accept when connecting to any
+// https site. We want this to be as liberal as possible.
+
+$a->config['system']['curl_ssl_ciphers'] = 'ALL:!eNULL';
+
 // default system theme
 
 $a->config['system']['theme'] = 'redbasic';