From 61f619043ea52b88b06501b2b38018a90c65cff7 Mon Sep 17 00:00:00 2001 From: Quanah Gibson-Mount Date: Mon, 25 Jan 2021 21:48:17 +0000 Subject: [PATCH] ITS#8580 - Explicitly honor the server side cipher suite preference --- libraries/libldap/tls_o.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libraries/libldap/tls_o.c b/libraries/libldap/tls_o.c index 5b9509a458..8eee6abcbd 100644 --- a/libraries/libldap/tls_o.c +++ b/libraries/libldap/tls_o.c @@ -501,6 +501,8 @@ tlso_ctx_init( struct ldapoptions *lo, struct ldaptls *lt, int is_server ) X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL ); } } + /* Explicitly honor the server side cipher suite preference */ + SSL_CTX_set_options( ctx, SSL_OP_CIPHER_SERVER_PREFERENCE ); return 0; }