diff --git a/src/capwap/capwap.h b/src/capwap/capwap.h
index ebe001bd..06f32daa 100644
--- a/src/capwap/capwap.h
+++ b/src/capwap/capwap.h
@@ -318,7 +318,12 @@ extern int wtpinfo_set_radioinfo(struct wtpinfo * wtpinfo,uint8_t *msgelem, int
 
 //#define CAPWAP_CIPHER			"PSK-AES128-CBC-SHA:"
 //#define CAPWAP_CIPHER	"AES128-SHA"
-#define CAPWAP_CIPHER	"ALL"
+
+#ifdef WITH_GNUTLS
+	#define CAPWAP_CIPHER	"NORMAL"
+#else
+	#define CAPWAP_CIPHER	"ALL"
+#endif