Hi Matthias,


> While ssl_prefer_server_ciphers usually works I've noticed some strange
> behaviour with Android. Firefox Sync uses with this settings "TLSv1
> RC4-SHA". When I remove all RC4 ciphers from that list, it chooses "TLSv1
> DHE-RSA-AES128-SHA". I'm wondering why it chooses RC4-SHA instead of
> DHE-RSA-AES128-SHA since it should have a higher priority.

Can you provide the capture file with the TLS handshake?


Regards,

Lukas


_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx