SSL_CTX_set_options(context->ssl_ctx, SSL_OP_NO_COMPRESSION);
SSL_CTX_set_options(context->ssl_ctx, SSL_OP_CIPHER_SERVER_PREFERENCE);
+ SSL_CTX_set_cipher_list(context->ssl_ctx, CIPHERS_LIST_STRING);
/* client context */
SSL_CTX_set_options(context->ssl_client_ctx, SSL_OP_NO_COMPRESSION);
SSL_CTX_set_options(context->ssl_client_ctx, SSL_OP_CIPHER_SERVER_PREFERENCE);
+ SSL_CTX_set_cipher_list(context->ssl_client_ctx, CIPHERS_LIST_STRING);
/* openssl init for cert verification (for client sockets) */
if (!ssl_ca_filepath) {
#define LWS_MAX_EXTENSIONS_ACTIVE 10
#define SPEC_LATEST_SUPPORTED 13
#define AWAITING_TIMEOUT 5
+#define CIPHERS_LIST_STRING "DEFAULT"
#define MAX_WEBSOCKET_04_KEY_LEN 128
#define SYSTEM_RANDOM_FILEPATH "/dev/urandom"