[gnutls-devel] GnuTLS | Setting tls priority lists is not working correctly (#1046)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Mon Jul 6 10:19:56 CEST 2020

Daiki Ueno commented on a discussion: https://gitlab.com/gnutls/gnutls/-/issues/1046#note_374022836

On second thought, it might be better that the application shall set the baseline profile before calling `gnutls_priority_set*` functions.  For example:
gnutls_default_system_priority_set (session, "NORMAL", ...);
gnutls_priority_set_direct (session, "@SAMBA,SYSTEM:-VERS-SSL3.0", ...);

That would mean:
- if `SAMBA` or `SYSTEM` configuration is found on the system, use it
- if not, use `NORMAL` profile
- in any case, disable SSL 3.0

Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1046#note_374022836
You're receiving this email because of your account on gitlab.com.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20200706/ddcd0372/attachment.html>

More information about the Gnutls-devel mailing list