From 2984688a6d428475554bb2c580732db6ee5ab46a Mon Sep 17 00:00:00 2001 From: Gabe Gattis Date: Wed, 6 Apr 2016 15:02:29 -0400 Subject: [PATCH] use the node.js default cipher suite for setting up a tls server instead of specifying our own --- bitcorenode/index.js | 2 -- bws.js | 3 +-- 2 files changed, 1 insertion(+), 4 deletions(-) diff --git a/bitcorenode/index.js b/bitcorenode/index.js index 7ac1efd..11dead7 100644 --- a/bitcorenode/index.js +++ b/bitcorenode/index.js @@ -59,8 +59,6 @@ Service.prototype._readHttpsOptions = function() { var serverOpts = {}; serverOpts.key = fs.readFileSync(this.httpsOptions.key); serverOpts.cert = fs.readFileSync(this.httpsOptions.cert); - serverOpts.ciphers = 'ECDHE-RSA-AES256-SHA:AES256-SHA:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM'; - serverOpts.honorCipherOrder = true; // This sets the intermediate CA certs only if they have all been designated in the config.js if (this.httpsOptions.CAinter1 && this.httpsOptions.CAinter2 && this.httpsOptions.CAroot) { diff --git a/bws.js b/bws.js index 4628b37..11a907c 100755 --- a/bws.js +++ b/bws.js @@ -27,8 +27,7 @@ var serverOpts = {}; if (config.https) { serverOpts.key = fs.readFileSync(config.privateKeyFile || './ssl/privatekey.pem'); serverOpts.cert = fs.readFileSync(config.certificateFile || './ssl/certificate.pem'); - serverOpts.ciphers = 'ECDHE-RSA-AES256-SHA:AES256-SHA:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM'; - serverOpts.honorCipherOrder = true; + // This sets the intermediate CA certs only if they have all been designated in the config.js if (config.CAinter1 && config.CAinter2 && config.CAroot) { serverOpts.ca = [fs.readFileSync(config.CAinter1),