Initialize cipher list when re-negotiating handshake.

If an NSSCipherSuite is defined in a location or directory then
we re-do the SSL handshake. The cipher list wasn't being initialized
to PR_FALSE so changes are good that all ciphers would be enabled,
not just the ones in the local NSSCipherSuite setting.

Resolves BZ 1165408

1 files changed, 4 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index d2413ff..e5ca948 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2014-11-12  Rob Crittenden <rcritten@redhat.com>
+    * Initialize ciphers to all disabled before renegotiation
+      (#1165408)
+
 2014-11-06  Rob Crittenden <rcritten@redhat.com>
     * Completely remove support for SSLv2