Merge pull request #457 from 6IRCNet/3.0

set SSL ciphers

config.template.yaml

@@ -79,6 +79,7 @@ https:
   passphrase: ''
   certfile: 'localhost.cert'
   cafile: ''
+  ciphers: 'HIGH:!DSS:!aNULL@STRENGTH'
 
 # Page template values
 # title goes in the upper left corner, description goes in a <meta> tag

lib/config.js

@@ -43,7 +43,8 @@ var defaults = {
         keyfile: "localhost.key",
         passphrase: "",
         certfile: "localhost.cert",
-        cafile: ""
+        cafile: "",
+        ciphers: "HIGH:!DSS:!aNULL@STRENGTH"
     },
     io: {
         domain: "http://localhost",

lib/server.js

@@ -72,7 +72,9 @@ var Server = function () {
         key: key,
         cert: cert,
         passphrase: Config.get("https.passphrase"),
-        ca: ca
+        ca: ca,
+        ciphers: Config.get("https.ciphers"),
+        honorCipherOrder: true
     };
 
     Config.get("listen").forEach(function (bind) {