[gnome-initial-setup] Disable SSLv3 because of POODLE



commit cf8f098043058ff28ff0755c239664cedfb18589
Author: Debarshi Ray <debarshir gnome org>
Date:   Tue Nov 11 15:00:59 2014 +0100

    Disable SSLv3 because of POODLE
    
    Since GOA is still using WebKit1, we need to set the environment
    variable ourself. We can stop setting it once we port to WebKit2
    because the network process will handle it for us.
    
    https://bugzilla.gnome.org/show_bug.cgi?id=739963

 gnome-initial-setup/gnome-initial-setup.c |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)
---
diff --git a/gnome-initial-setup/gnome-initial-setup.c b/gnome-initial-setup/gnome-initial-setup.c
index 8488d8a..1edf6da 100644
--- a/gnome-initial-setup/gnome-initial-setup.c
+++ b/gnome-initial-setup/gnome-initial-setup.c
@@ -195,6 +195,9 @@ main (int argc, char *argv[])
     { NULL }
   };
 
+  /* FIXME: remove this when GOA uses WebKit2 */
+  g_setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:!VERS-SSL3.0", FALSE);
+
   g_unsetenv ("GIO_USE_VFS");
 
   context = g_option_context_new (_("- GNOME initial setup"));


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]