From 4fe967d4459809def3536d28cd225ae0df5d3c27 Mon Sep 17 00:00:00 2001
From: Julien Vehent <julien@linuxwall.info>
Date: Wed, 18 Jun 2014 11:20:11 -0400
Subject: [PATCH] Replace RC4 with 3DES to comply with
 https://wiki.mozilla.org/Security/Server_Side_TLS

---
 aws-tools/apply_security_assurance_elb_ciphersuite_policy.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/aws-tools/apply_security_assurance_elb_ciphersuite_policy.py b/aws-tools/apply_security_assurance_elb_ciphersuite_policy.py
index 01f14c3..5282428 100755
--- a/aws-tools/apply_security_assurance_elb_ciphersuite_policy.py
+++ b/aws-tools/apply_security_assurance_elb_ciphersuite_policy.py
@@ -39,7 +39,7 @@
                     "CAMELLIA128-SHA": True,
                     "CAMELLIA256-SHA": True,
                     "DES-CBC3-MD5": False,
-                    "DES-CBC3-SHA": False,
+                    "DES-CBC3-SHA": True,
                     "DES-CBC-MD5": False,
                     "DES-CBC-SHA": False,
                     "DHE-DSS-AES128-GCM-SHA256": True,
@@ -95,7 +95,7 @@
                     "PSK-RC4-SHA": False,
                     "RC2-CBC-MD5": False,
                     "RC4-MD5": False,
-                    "RC4-SHA": True,
+                    "RC4-SHA": False,
                     "SEED-SHA": False}
 
 policy_name = 'Mozilla-Security-Assurance-Ciphersuite-Policy-v-1-2'