src/third_party/tlslite/patches/client_cipher_preferences.patch

   1 diff --git a/third_party/tlslite/tlslite/tlsconnection.py b/third_party/tlslite/tlslite/tlsconnection.py
   2 index b9797d2..20cd85b 100755
   3 --- a/third_party/tlslite/tlslite/tlsconnection.py
   4 +++ b/third_party/tlslite/tlslite/tlsconnection.py
   5 @@ -1386,10 +1386,9 @@ class TLSConnection(TLSRecordLayer):
   6          #the only time we won't use it is if we're resuming a
   7          #session, in which case we use the ciphersuite from the session.
   8          #
   9 -        #Given the current ciphersuite ordering, this means we prefer SRP
  10 -        #over non-SRP.
  11 -        for cipherSuite in cipherSuites:
  12 -            if cipherSuite in clientHello.cipher_suites:
  13 +        #Use the client's preferences for now.
  14 +        for cipherSuite in clientHello.cipher_suites:
  15 +            if cipherSuite in cipherSuites:
  16                  break
  17          else:
  18              for result in self._sendError(\