[gnutls-devel] GnuTLS | Add GOST-CNT ciphersuite support (!1119)

[Development of GNU's TLS library]

Nikos Mavrogiannopoulos commented on a discussion on lib/priority.c: https://gitlab.com/gnutls/gnutls/merge_requests/1119#note_243931505

>  #endif
>  #ifdef ENABLE_DHE
>  	GNUTLS_KX_DHE_RSA,
> +#endif
> +#ifdef ENABLE_GOST
> +	GNUTLS_KX_VKO_GOST_12,

Indeed. The configuration file as it is now, it allows you to disable globally algorithms. There is no way to enable algorithms globally (in fedora we have a hack with @SYSTEM but it does not extend beyond fedora, nor maybe a good idea).  Maybe we can allow the config file to override or append to the default priorities.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/1119#note_243931505
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20191113/bed2ab24/attachment-0001.html>