[pan2] Enable all TLS versions supported by GnuTLS



commit b4329315c16c45fc8e5faf8f8d16d90129424ef7
Author: Detlef Graef <detlef graef yahoo de>
Date:   Tue Jul 18 18:55:44 2017 +0200

    Enable all TLS versions supported by GnuTLS

 pan/tasks/socket-impl-openssl.cc |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/pan/tasks/socket-impl-openssl.cc b/pan/tasks/socket-impl-openssl.cc
index e2fcb5e..8443190 100644
--- a/pan/tasks/socket-impl-openssl.cc
+++ b/pan/tasks/socket-impl-openssl.cc
@@ -808,9 +808,9 @@ GIOChannelSocketGnuTLS :: gnutls_get_iochannel(GIOChannel* channel, const char*
 
   gnutls_priority_set_direct (
   session,
-  // prefer tls 1.0 for now....
   // "NONE:+VERS-SSL3.0:+CIPHER-ALL:+COMP-ALL:+RSA:+DHE-RSA:+DHE-DSS:+MAC-ALL"
-  "NONE:+VERS-TLS1.0:+CIPHER-ALL:+COMP-ALL:+RSA:+DHE-RSA:+DHE-DSS:+MAC-ALL", NULL);
+  // "NONE:+VERS-TLS1.0:+CIPHER-ALL:+COMP-ALL:+RSA:+DHE-RSA:+DHE-DSS:+MAC-ALL", NULL); // prefer tls 1.0 for 
now....
+  "NONE:+VERS-TLS-ALL:+CIPHER-ALL:+COMP-ALL:+KX-ALL:SIGN-ALL:+CURVE-ALL:+CTYPE-ALL:+MAC-ALL", NULL); // 
enable all TLS versions
 
   gnutls_certificate_credentials_t creds = _certstore.get_creds();
   gnutls_credentials_set (session, GNUTLS_CRD_CERTIFICATE, creds);


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]