[glib-networking/mcatanzaro/disable-old-protocols: 2/2] gnutls: Disable TLS 1.0 and TLS 1.1



commit 0f5938dbc7ac92913673c102b5707675ca8a0eb9
Author: Michael Catanzaro <mcatanzaro gnome org>
Date:   Fri Sep 20 15:30:09 2019 -0500

    gnutls: Disable TLS 1.0 and TLS 1.1

 tls/gnutls/gtlsconnection-gnutls.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
---
diff --git a/tls/gnutls/gtlsconnection-gnutls.c b/tls/gnutls/gtlsconnection-gnutls.c
index 2ea627b..e8f62eb 100644
--- a/tls/gnutls/gtlsconnection-gnutls.c
+++ b/tls/gnutls/gtlsconnection-gnutls.c
@@ -103,7 +103,7 @@ static gnutls_priority_t priorities[2][2];
 /* TODO: Get rid of this in favor of gnutls_set_default_priority_append()
  * when upgrading to GnuTLS 3.6.3.
  */
-#define DEFAULT_BASE_PRIORITY "NORMAL:%COMPAT"
+#define DEFAULT_BASE_PRIORITY "NORMAL:%COMPAT:-VERS-TLS1.1:-VERS-TLS1.0"
 
 static void
 g_tls_connection_gnutls_init_priorities (void)


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]