Fix usage of insecure 3DES cipher suites when curl is disabled

Seldaek · Seldaek · commit 5e71d77e3a33 · 2026-03-16T15:35:24.000+01:00
diff --git a/src/Composer/Util/StreamContextFactory.php b/src/Composer/Util/StreamContextFactory.php
@@ -167,11 +167,11 @@ public static function getTlsDefaults(array $options, ?LoggerInterface $logger =
             'AES256-SHA',
             'AES',
             'CAMELLIA',
-            'DES-CBC3-SHA',
             '!aNULL',
             '!eNULL',
             '!EXPORT',
             '!DES',
+            '!3DES',
             '!RC4',
             '!MD5',
             '!PSK',
