Enabled disabling of openssl cipher suits. RC4 disabled by default.

config.template.yaml

@@ -79,6 +79,7 @@ https:
   passphrase: ''
   certfile: 'localhost.cert'
   cafile: ''
+  ciphers: 'ALL:!RC4'
 
 # Page template values
 # title goes in the upper left corner, description goes in a <meta> tag

lib/config.js

@@ -43,7 +43,8 @@ var defaults = {
         keyfile: "localhost.key",
         passphrase: "",
         certfile: "localhost.cert",
-        cafile: ""
+        cafile: "",
+	ciphers: "ALL:!RC4"
     },
     io: {
         domain: "http://localhost",

lib/server.js

@@ -72,7 +72,8 @@ var Server = function () {
         key: key,
         cert: cert,
         passphrase: Config.get("https.passphrase"),
-        ca: ca
+        ca: ca,
+	ciphers: Config.get("https.ciphers")
     };
 
     Config.get("listen").forEach(function (bind) {