avoid Cloudflare CAPTCHAs for OpenSSL < 1.1.1

see https://github.com/Anorov/cloudflare-scrape/pull/242

README.rst

@@ -22,7 +22,6 @@ Optional
 
 - FFmpeg_: Pixiv Ugoira to WebM conversion
 - youtube-dl_: Video downloads
-- pyOpenSSL_: Accessing Cloudflare protected sites
 
 
 Installation
@@ -232,7 +231,6 @@ access to *gallery-dl*. Authorize it and you will be shown one or more
 .. _Requests:   http://docs.python-requests.org/en/master/
 .. _FFmpeg:     https://www.ffmpeg.org/
 .. _youtube-dl: https://ytdl-org.github.io/youtube-dl/
-.. _pyOpenSSL:  https://pyopenssl.org/
 .. _Snapd:      https://docs.snapcraft.io/installing-snapd
 .. _OAuth:      https://en.wikipedia.org/wiki/OAuth
 

gallery_dl/extractor/common.py

@@ -412,6 +412,8 @@ if urllib3.__version__ < "1.25":
         "updating default urllib3 ciphers")
     # cipher list taken from urllib3 1.25
     # https://github.com/urllib3/urllib3/blob/1.25/src/urllib3/util/ssl_.py
+    # with additions from
+    # https://github.com/Anorov/cloudflare-scrape/pull/242
     ssl_.DEFAULT_CIPHERS = (
         "ECDHE+AESGCM:"
         "ECDHE+CHACHA20:"
@@ -423,6 +425,8 @@ if urllib3.__version__ < "1.25":
         "DH+AES:"
         "RSA+AESGCM:"
         "RSA+AES:"
+        "!ECDHE+SHA:"
+        "!AES128-SHA:"
         "!aNULL:"
         "!eNULL:"
         "!MD5:"