[Pidgin] #16262: Connecting to ejabberd that has RC4 disabled: SSL Handshake Failed

[Pidgin]

#16262: Connecting to ejabberd that has RC4 disabled: SSL Handshake Failed
-----------------------+---------------------------
 Reporter:  asjoegren  |       Owner:  EionRobb
     Type:  defect     |      Status:  new
Milestone:             |   Component:  unclassified
  Version:  2.10.9     |  Resolution:
 Keywords:  ssl        |
-----------------------+---------------------------

Comment (by datallah):

 I guess it's a matter that the ciphers need to be enabled within the
 client.


 If I add the following to to `libpurple/plugins/ssl/ssl-
 nss.c:ssl_nss_init_nss`, then that cipher appears to be enabled.
 {{{
 SSL_CipherPrefSetDefault(TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, 1);
 }}}

 I misunderstood [https://developer.mozilla.org/en-
 US/docs/Mozilla/Projects/NSS/NSS_3.15.2_release_notes this comment] about
 `NSS_SetDomesticPolicy` - that's more about restricting what can be used
 from what's enabled than enabling by default.

 It looks like it's going to be up to us to enable appropriate ciphers in
 the client (ugh!).

--
Ticket URL: <https://developer.pidgin.im/ticket/16262#comment:13>
Pidgin <https://pidgin.im>
Pidgin