commit 87b15f87f9e01e8e8d8350aa3fc74a08599ad6e8
author Kenny Root <kroot@google.com> Tue Mar 07 14:19:30 2017 -0800
committer Kenny Root <kroot@google.com> Wed Mar 08 15:17:25 2017 -0800
tree 67b597083160da8c113058c268eb72f2a9e41c31
parent 23dd5ee0bd9bfe0b4c09b3312808130efb6dcae6

Remove DHE ciphers from defaults list

Since DHE does not allow negotiation of the group used, it is pretty
broken. ECDHE at least allows the negotiation of the group which allows
its security to be maintained with configuration changes in the client
or server.

This tracks a change in Conscrypt merged in
906cfad7e08fd339be06441ff42960743f95053c

Test: cts-tradefed run cts -m CtsLibcoreOkHttpTestCases -a arm64-v8a
Test: cts-tradefed run cts -m CtsLibcoreTestCases -a arm64-v8a
Test: make docs
Test: visual inspection of docs output in web browser
Change-Id: Ic90297bf6b1c82af192a887797238ad250e3d1ce