[gnutls-devel] GnuTLS | priority: support allowlisting in configuration file (!1427)

[Read-only notification of GnuTLS library development activities]

Daiki Ueno commented on a discussion on lib/algorithms/ecc.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1427#note_732633275

> +	}
> +}
> +
> +/**
> + * gnutls_ecc_curve_mark_enabled:
> + * @curve: is an ECC curve
> + *
> + * Mark @curve as disabled system wide. This setting can be reverted with
> + * gnutls_ecc_curve_mark_enabled(). This only works if the configuration file
> + * uses the allowlisting mode.
> + *
> + * Returns: 0 on success or negative error code otherwise.
> + *
> + * Since: 3.7.3
> + */
> +int gnutls_ecc_curve_mark_disabled(gnutls_ecc_curve_t curve)

That's a very good point and it also made me think that we could reduce the number of new APIs if we just add the extra argument :-) So now those public functions take the `enabled` (or `secure`) argument.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1427#note_732633275
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20211114/9bd40684/attachment.html>