From 155be191a77b8ab61d7c4bb66e148095d00c80ad Mon Sep 17 00:00:00 2001
From: Robert Rayer <33558471+RobertRayer@users.noreply.github.com>
Date: Wed, 4 Jan 2023 16:48:19 -0500
Subject: [PATCH] added ecdhe_rsa_aes128 cipher to the tls_1_2_2017 policy
 (#3740)

---
 tls/s2n_cipher_preferences.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tls/s2n_cipher_preferences.c b/tls/s2n_cipher_preferences.c
index b28243d4715..fc17e958916 100644
--- a/tls/s2n_cipher_preferences.c
+++ b/tls/s2n_cipher_preferences.c
@@ -1007,6 +1007,8 @@ struct s2n_cipher_suite *cipher_suites_cloudfront_tls_1_2_2017[] = {
     &s2n_ecdhe_rsa_with_aes_256_cbc_sha384,
     &s2n_ecdhe_ecdsa_with_aes_256_cbc_sha,
     &s2n_ecdhe_rsa_with_aes_256_cbc_sha,
+    &s2n_ecdhe_ecdsa_with_aes_128_cbc_sha,
+    &s2n_ecdhe_rsa_with_aes_128_cbc_sha,
     &s2n_rsa_with_aes_128_gcm_sha256,
     &s2n_rsa_with_aes_256_gcm_sha384,
     &s2n_rsa_with_aes_128_cbc_sha256