[vlc-devel] [PATCH] Use @SYSTEM wide ciphers for gnutls

Nicolas Chauvet kwizart at gmail.com
Mon Jul 22 12:04:00 CEST 2019


Gnutls upstream has support for system
This is decribed at
https://fedoraproject.org/wiki/Packaging:CryptoPolicies
Also found on the debian wiki
https://wiki.debian.org/CryptoPolicy

Signed-off-by: Nicolas Chauvet <kwizart at gmail.com>
---
 modules/misc/gnutls.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/misc/gnutls.c b/modules/misc/gnutls.c
index 1b214358d4..05b4209692 100644
--- a/modules/misc/gnutls.c
+++ b/modules/misc/gnutls.c
@@ -768,6 +768,7 @@ static void CloseServer (vlc_tls_creds_t *crd)
     "hash functions and compression methods can be selected. " \
     "Refer to GNU TLS documentation for detailed syntax.")
 static const char *const priorities_values[] = {
+    "@SYSTEM",
     "PERFORMANCE",
     "NORMAL",
     "SECURE128",
@@ -775,6 +776,7 @@ static const char *const priorities_values[] = {
     "EXPORT",
 };
 static const char *const priorities_text[] = {
+    N_("System (default to system crypto ciphers policy)"),
     N_("Performance (prioritize faster ciphers)"),
     N_("Normal"),
     N_("Secure 128-bits (exclude 256-bits ciphers)"),
-- 
2.17.2



More information about the vlc-devel mailing list