--- a/src/kvilib/net/KviSSL.cpp
+++ b/src/kvilib/net/KviSSL.cpp
@@ -376,7 +376,7 @@
// ADH are moved to the end since they are less secure, but they don't need a certificate
// (so we can use secure dcc without a cert)
// NOTE: see bug ticket #155
- SSL_CTX_set_cipher_list(m_pSSLCtx, "ALL:!eNULL:!EXP:!SSLv2:+ADH@STRENGTH");
+ SSL_CTX_set_cipher_list(m_pSSLCtx, "PROFILE=SYSTEM");
SSL_CTX_set_tmp_dh_callback(m_pSSLCtx, my_ugly_dh_callback);
return true;
}