OpenSSL 'ChangeCipherSpec' MiTM Potential Vulnerability

[Jose Nilton Pace]

Hi. In ServerController.SSLOptions.CipherList, try to put only SCH_USE_STRONG_CRYPTO and TLS 1.2 ciphers only. You can check on the link below, all the ciphers used in windows (and in the IW 15 http.sys version). I'm using IW 15 (http.sys) and configured on windows, only TLS 1.2 and STRONG ciphers.
Link: https://docs.microsoft.com/pt-br/windows...s-10-v1607