pacemaker/bz1179335-system-wide-crypto-policies.patch
Jan Pokorný fb1901f628
1.1.13-4: Adapt to follow Fedora crypto policies (rhbz#1179335)
Signed-off-by: Jan Pokorný <jpokorny@redhat.com>
2015-10-20 23:18:49 +02:00

15 lines
797 B
Diff

--- a/lib/common/remote.c.orig 2015-10-20 23:05:53.601054078 +0200
+++ b/lib/common/remote.c 2015-10-20 23:08:06.128302567 +0200
@@ -173,8 +173,10 @@
gnutls_init(session, type);
# ifdef HAVE_GNUTLS_PRIORITY_SET_DIRECT
+/* https://fedoraproject.org/wiki/Packaging:CryptoPolicies */
+ gnutls_priority_set_direct(*session, "@SYSTEM", NULL);
/* http://www.manpagez.com/info/gnutls/gnutls-2.10.4/gnutls_81.php#Echo-Server-with-anonymous-authentication */
- gnutls_priority_set_direct(*session, "NORMAL:+ANON-DH", NULL);
+/* gnutls_priority_set_direct(*session, "NORMAL:+ANON-DH", NULL); */
/* gnutls_priority_set_direct (*session, "NONE:+VERS-TLS-ALL:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+COMP-ALL:+ANON-DH", NULL); */
# else
gnutls_set_default_priority(*session);