diff --git a/src/PVE/APIServer/AnyEvent.pm b/src/PVE/APIServer/AnyEvent.pm
index e765418..c159b8d 100644
--- a/src/PVE/APIServer/AnyEvent.pm
+++ b/src/PVE/APIServer/AnyEvent.pm
@@ -1885,9 +1885,12 @@ sub new {
 	    $self->{ssl}->{dh} = 'skip2048';
 	}
 
-	my $tls_ctx_flags = &Net::SSLeay::OP_NO_COMPRESSION | &Net::SSLeay::OP_SINGLE_ECDH_USE |
-	    &Net::SSLeay::OP_SINGLE_DH_USE | &Net::SSLeay::OP_NO_RENEGOTIATION;
-	if ( delete $self->{ssl}->{honor_cipher_order} ) {
+	my $tls_ctx_flags = 0;
+	$tls_ctx_flags |= &Net::SSLeay::OP_NO_COMPRESSION;
+	$tls_ctx_flags |= &Net::SSLeay::OP_SINGLE_ECDH_USE;
+	$tls_ctx_flags |= &Net::SSLeay::OP_SINGLE_DH_USE;
+	$tls_ctx_flags |= &Net::SSLeay::OP_NO_RENEGOTIATION;
+	if (delete $self->{ssl}->{honor_cipher_order}) {
 	    $tls_ctx_flags |= &Net::SSLeay::OP_CIPHER_SERVER_PREFERENCE;
 	}