[pan2] Enable all TLS versions supported by GnuTLS
- From: Petr Kovář <pmkovar src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [pan2] Enable all TLS versions supported by GnuTLS
- Date: Sun, 23 Jul 2017 19:30:58 +0000 (UTC)
commit b4329315c16c45fc8e5faf8f8d16d90129424ef7
Author: Detlef Graef <detlef graef yahoo de>
Date: Tue Jul 18 18:55:44 2017 +0200
Enable all TLS versions supported by GnuTLS
pan/tasks/socket-impl-openssl.cc | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/pan/tasks/socket-impl-openssl.cc b/pan/tasks/socket-impl-openssl.cc
index e2fcb5e..8443190 100644
--- a/pan/tasks/socket-impl-openssl.cc
+++ b/pan/tasks/socket-impl-openssl.cc
@@ -808,9 +808,9 @@ GIOChannelSocketGnuTLS :: gnutls_get_iochannel(GIOChannel* channel, const char*
gnutls_priority_set_direct (
session,
- // prefer tls 1.0 for now....
// "NONE:+VERS-SSL3.0:+CIPHER-ALL:+COMP-ALL:+RSA:+DHE-RSA:+DHE-DSS:+MAC-ALL"
- "NONE:+VERS-TLS1.0:+CIPHER-ALL:+COMP-ALL:+RSA:+DHE-RSA:+DHE-DSS:+MAC-ALL", NULL);
+ // "NONE:+VERS-TLS1.0:+CIPHER-ALL:+COMP-ALL:+RSA:+DHE-RSA:+DHE-DSS:+MAC-ALL", NULL); // prefer tls 1.0 for
now....
+ "NONE:+VERS-TLS-ALL:+CIPHER-ALL:+COMP-ALL:+KX-ALL:SIGN-ALL:+CURVE-ALL:+CTYPE-ALL:+MAC-ALL", NULL); //
enable all TLS versions
gnutls_certificate_credentials_t creds = _certstore.get_creds();
gnutls_credentials_set (session, GNUTLS_CRD_CERTIFICATE, creds);
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]