gnome-remote-desktop/libvncserver-LibVNCServer-0.9.13-system-crypto-policy.patch
Jonas Ådahl 9a9f01d12e Bundle libvncserver and disable RDP support
Bundling libvncserver allows backport security updates to libvncserver
without having to care about ABI changes, which security updates tend to
often result in.

RDP is disabled as the freerdp package doesn't provide the server bits,
and RDP support isn't fully integrated into GNOME yet.

Resolves: #1951301
2021-04-23 16:55:44 +02:00

16 lines
846 B
Diff

diff -up libvncserver-LibVNCServer-0.9.13/libvncclient/tls_gnutls.c.crypto_policy libvncserver-LibVNCServer-0.9.13/libvncclient/tls_gnutls.c
--- libvncserver-LibVNCServer-0.9.13/libvncclient/tls_gnutls.c.crypto_policy 2020-06-13 13:49:53.000000000 -0500
+++ libvncserver-LibVNCServer-0.9.13/libvncclient/tls_gnutls.c 2020-07-02 08:00:54.304902893 -0500
@@ -29,8 +29,8 @@
#include "tls.h"
-static const char *rfbTLSPriority = "NORMAL:+DHE-DSS:+RSA:+DHE-RSA:+SRP";
-static const char *rfbAnonTLSPriority= "NORMAL:+ANON-DH";
+static const char *rfbTLSPriority = "@SYSTEM";
+static const char *rfbAnonTLSPriority= "@SYSTEM:+ANON-DH";
#define DH_BITS 1024
static gnutls_dh_params_t rfbDHParams;
diff -up libvncserver-LibVNCServer-0.9.13/libvncserver/rfbssl_gnutls.c.crypto_policy libvncserver-LibVNCServer-0.9.13/libvncserver/rfbssl_gnutls.c