[gnutls-devel] GnuTLS | libgnutls: Add system-wide default-priority-string override. (!1158)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Wed Jan 8 13:40:30 CET 2020




Nikos Mavrogiannopoulos started a new discussion on tests/system-override-default-priority-string.sh: https://gitlab.com/gnutls/gnutls/merge_requests/1158#note_268604006

> +	fail "expected connection to fail (2)"
> +
> +export GNUTLS_SYSTEM_PRIORITY_FILE="${STOCK_PRIORITY}"
> +"${CLI}" -p "${PORT}" 127.0.0.1 --priority "NORMAL:-VERS-TLS-ALL:+VERS-TLS1.3" --insecure --logfile ${TMPFILE2} </dev/null >/dev/null ||
> +	fail "expected connection to succeed (1)"
> +
> +kill ${PID}
> +wait
> +
> +cat <<_EOF_ > ${TMPFILE}
> +SYSTEM=NORMAL
> +[overrides]
> +default-priority-string = 
> +_EOF_
> +
> +# Check that an empty default-priority-string results in an built-one being used

Why succeed on that case? Shouldn't an empty one be reported as a misconfiguration?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/1158#note_268604006
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20200108/9501f1aa/attachment.html>


More information about the Gnutls-devel mailing list