From dcd8640ce4dc93b28f2c39d2480ed9e0ba697c89 Mon Sep 17 00:00:00 2001
From: Mark Reynolds <mreynolds@redhat.com>
Date: Tue, 18 Oct 2016 13:46:33 -0400
Subject: [PATCH] Ticket 48743 - ds-console enables obsolete SSL ciphers by
 default

Description:  Do not enable the Fortezza ciphers by default

https://fedorahosted.org/389/ticket/48743

Reviewed by: ?
---
 src/com/netscape/admin/dirserv/panel/EncryptionPanel.java    | 6 +++---
 src/com/netscape/admin/dirserv/panel/layout.cipherPreference | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/com/netscape/admin/dirserv/panel/EncryptionPanel.java b/src/com/netscape/admin/dirserv/panel/EncryptionPanel.java
index 4985cff..873dea7 100644
--- a/src/com/netscape/admin/dirserv/panel/EncryptionPanel.java
+++ b/src/com/netscape/admin/dirserv/panel/EncryptionPanel.java
@@ -751,9 +751,9 @@ class EncryptionConfigData {
 									   "+rsa_fips_des_sha," +
 	                                   "+rsa_3des_sha," +
 									   "+rsa_fips_3des_sha," +
-									   "+fortezza," +
-									   "+fortezza_rc4_128_sha," +
-									   "+fortezza_null," +
+									   "-fortezza," +
+									   "-fortezza_rc4_128_sha," +
+									   "-fortezza_null," +
 									   "+tls_rsa_export1024_with_rc4_56_sha," +
 	                                   "+tls_rsa_export1024_with_des_cbc_sha," +
 	                                   "+tls_rsa_aes_128_sha," +
diff --git a/src/com/netscape/admin/dirserv/panel/layout.cipherPreference b/src/com/netscape/admin/dirserv/panel/layout.cipherPreference
index 7083c03..dd7ec34 100644
--- a/src/com/netscape/admin/dirserv/panel/layout.cipherPreference
+++ b/src/com/netscape/admin/dirserv/panel/layout.cipherPreference
@@ -103,7 +103,7 @@
                                      ctrl=togglepane;
                                      text=$.cipherPreference.ss3.6
                                      id="fortezza";
-                                     val=true;
+                                     val=false;
                                  },
                                  {
                                      ctrl=rigid;
-- 
2.7.4