--- a/core/certmanager.lua	Fri Jul 12 17:44:30 2013 +0200
+++ b/core/certmanager.lua	Sat Jul 13 13:17:53 2013 +0100
@@ -38,6 +38,7 @@
 	options = { "no_sslv2", luasec_has_noticket and "no_ticket" or nil };
 	verifyext = { "lsec_continue", "lsec_ignore_purpose" };
 	curve = "secp384r1";
+	ciphers = "HIGH:!DSS:!aNULL@STRENGTH";
 }
 local path_options = { -- These we pass through resolve_path()
 	key = true, certificate = true, cafile = true, capath = true