ITS#8580 - Explicitly honor the server side cipher suite preference

This commit is contained in:
Quanah Gibson-Mount 2021-01-25 21:48:17 +00:00
parent 0799f58533
commit 61f619043e

View file

@ -501,6 +501,8 @@ tlso_ctx_init( struct ldapoptions *lo, struct ldaptls *lt, int is_server )
X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL );
}
}
/* Explicitly honor the server side cipher suite preference */
SSL_CTX_set_options( ctx, SSL_OP_CIPHER_SERVER_PREFERENCE );
return 0;
}