Index: net/socket/ssl_client_socket_impl.cc |
diff --git a/net/socket/ssl_client_socket_impl.cc b/net/socket/ssl_client_socket_impl.cc |
index 80ff994982f2d3e804266d8623bae1dd2e90b0d4..12867ad2e3a3d44dc10e6373c346b4e2af7adfa0 100644 |
--- a/net/socket/ssl_client_socket_impl.cc |
+++ b/net/socket/ssl_client_socket_impl.cc |
@@ -988,16 +988,11 @@ int SSLClientSocketImpl::Init() { |
// supported. As DHE is being deprecated, don't add a cipher only to remove it |
// immediately. |
std::string command( |
- "DEFAULT:!SHA256:!SHA384:!DHE-RSA-AES256-GCM-SHA384:!aPSK"); |
+ "DEFAULT:!SHA256:!SHA384:!DHE-RSA-AES256-GCM-SHA384:!aPSK:!RC4"); |
if (ssl_config_.require_ecdhe) |
command.append(":!kRSA:!kDHE"); |
- if (!(ssl_config_.rc4_enabled && |
- ssl_config_.deprecated_cipher_suites_enabled)) { |
- command.append(":!RC4"); |
- } |
- |
if (!ssl_config_.deprecated_cipher_suites_enabled) { |
// Only offer DHE on the second handshake. https://crbug.com/538690 |
command.append(":!kDHE"); |