From 17755378cd33dad2d287601f189623c0d195e595 Mon Sep 17 00:00:00 2001
From: Peter Mosmans <support@go-forward.net>
Date: Tue, 25 Nov 2014 18:08:29 +1000
Subject: [PATCH] Changed cipher ordering for 'sensitive' servers

Prevents certain servers on choking
---
 cipherscan | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/cipherscan b/cipherscan
index 6efb49c..2b10212 100755
--- a/cipherscan
+++ b/cipherscan
@@ -35,9 +35,10 @@ if [ ! -e "$CACERTS" ]; then
     CACERTS="$(dirname $0)/ca-bundle.crt"
 fi
 
-# RSA ciphers are put at the end to force Google servers to accept ECDSA ciphers
-# (probably a result of a workaround for the bug in Apple implementation of ECDSA)
-CIPHERSUITE="ALL:COMPLEMENTOFALL:+aRSA"
+# RSA ciphers can be placed at the end to force Google servers to accept ECDSA ciphers
+# (probably a result of a workaround for the bug in Apple implementation of ECDSA) :
+#CIPHERSUITE="ALL:COMPLEMENTOFALL:+aRSA"
+CIPHERSUITE="ALL:COMPLEMENTOFALL:aRSA"
 DEBUG=0
 VERBOSE=0
 DELAY=0