diff -up openssl-1.0.2a/ssl/ssl.h.weak-ciphers openssl-1.0.2a/ssl/ssl.h

--- openssl-1.0.2a/ssl/ssl.h.weak-ciphers	2015-04-22 15:11:14.026574414 +0200

+++ openssl-1.0.2a/ssl/ssl.h	2015-04-22 15:14:51.302744713 +0200

@@ -338,7 +338,7 @@ extern "C" {

  * The following cipher list is used by default. It also is substituted when

  * an application-defined cipher list string starts with 'DEFAULT'.

  */

-# define SSL_DEFAULT_CIPHER_LIST "ALL:!EXPORT:!aNULL:!eNULL:!SSLv2"

+# define SSL_DEFAULT_CIPHER_LIST "ALL:!EXPORT:!aNULL:!eNULL:!SSLv2:!DES"

 /*

  * As of OpenSSL 1.0.0, ssl_create_cipher_list() in ssl/ssl_ciph.c always

  * starts with a reasonable order, and all we have to do for DEFAULT is