Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Don't set default ciphers for OpenSSL client sockets
It should be up to the OS to set the default ciphers, eg. if a cipher suddenly is deemed insecure or there's a reason to have another cipher order, such as ChaCha over any AES cipher because of lack of hardware support. Currently Crystal will expose up-to-date OS to security considirations because of hard coded cipher lists, that might not be so up to date, unless the application is recompiled with a modern Crystal version.
- Loading branch information