[gnutls-devel] GnuTLS | Setting tls priority lists is not working correctly (#1046)

[Development of GNU's TLS library]

Daiki Ueno commented on a discussion: https://gitlab.com/gnutls/gnutls/-/issues/1046#note_374022836

On second thought, it might be better that the application shall set the baseline profile before calling `gnutls_priority_set*` functions.  For example:
```c
gnutls_default_system_priority_set (session, "NORMAL", ...);
...
gnutls_priority_set_direct (session, "@SAMBA,SYSTEM:-VERS-SSL3.0", ...);
```

That would mean:
- if `SAMBA` or `SYSTEM` configuration is found on the system, use it
- if not, use `NORMAL` profile
- in any case, disable SSL 3.0

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1046#note_374022836
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20200706/ddcd0372/attachment.html>