[btls] Disable RC4 cipher suites by default
authorAlexander Köplinger <alex.koeplinger@outlook.com>
Wed, 18 Jan 2017 20:53:22 +0000 (21:53 +0100)
committerAlexander Köplinger <alex.koeplinger@outlook.com>
Wed, 18 Jan 2017 20:54:47 +0000 (21:54 +0100)
commit7fca4572d93c65ffd2486d8b98cc6edf7b11542c
tree6d70adbfd68f9e08cd2e544d98b9d5042b2e4978
parentec53a1c25700a5e9d9998f5f28afd28e96a39c62
[btls] Disable RC4 cipher suites by default

They should not be used anymore according to https://tools.ietf.org/html/rfc7465
and browser like Chrome, Firefox and Edge/IE [1] already removed them.

We should to do the same. To have everything in one place I also moved
the disabling of SSLv2/v3 to the mono_btls_ssl_ctx_new function as well
instead of disabling it on each single connection.

Fixes https://bugzilla.xamarin.com/show_bug.cgi?id=51625

[1] https://blogs.windows.com/msedgedev/2016/08/09/rc4-now-deprecated/
mono/btls/btls-ssl-ctx.c
mono/btls/btls-ssl.c