fa40b0
diff -ur mutt-1.9.0.orig/init.h mutt-1.9.0/init.h
fa40b0
--- mutt-1.9.0.orig/init.h	2017-09-04 16:48:21.409528002 +0200
fa40b0
+++ mutt-1.9.0/init.h	2017-09-04 16:49:26.505093636 +0200
fa40b0
@@ -3510,7 +3510,7 @@
fa40b0
   */
fa40b0
 #  endif /* defined HAVE_SSL_PARTIAL_CHAIN */
fa40b0
 # endif /* defined USE_SSL_OPENSSL */
fa40b0
-  { "ssl_ciphers", DT_STR, R_NONE, {.p=&SslCiphers}, {.p=0} },
fa40b0
+  { "ssl_ciphers", DT_STR, R_NONE, {.p=&SslCiphers}, {.p="@SYSTEM"} },
fa40b0
   /*
fa40b0
   ** .pp
fa40b0
   ** Contains a colon-separated list of ciphers to use when using SSL.
fa40b0
diff -ur mutt-1.9.0.orig/mutt_ssl_gnutls.c mutt-1.9.0/mutt_ssl_gnutls.c
fa40b0
--- mutt-1.9.0.orig/mutt_ssl_gnutls.c	2017-09-04 16:48:21.403528134 +0200
fa40b0
+++ mutt-1.9.0/mutt_ssl_gnutls.c	2017-09-04 16:51:16.081679141 +0200
fa40b0
@@ -286,6 +286,8 @@
fa40b0
   else
fa40b0
     mutt_buffer_strcpy (priority, "NORMAL");
fa40b0
 
fa40b0
+if (SslCiphers && strcmp(SslCiphers, "@SYSTEM"))
fa40b0
+{
fa40b0
   if (!option (OPTTLSV1_3))
fa40b0
   {
fa40b0
     nproto--;
fa40b0
@@ -313,6 +315,7 @@
fa40b0
     mutt_error (_("All available protocols for TLS/SSL connection disabled"));
fa40b0
     goto cleanup;
fa40b0
   }
fa40b0
+}
fa40b0
 
fa40b0
   if ((err = gnutls_priority_set_direct (data->state, mutt_b2s (priority), NULL)) < 0)
fa40b0
   {