Skip to content

Commit

Permalink
Use @System priority for TLS on Fedora >= 21
Browse files Browse the repository at this point in the history
In Fedora >= 21, there is a new crypto priority framework
that sets TLS policies globally for all apps. To activate
this with GNUTLS we must request "@System" instead of
the traditional "NORMAL" string. The '@' causes gnutls todo
a lookup in its config file for the 'SYSTEM' keyword entry.

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
  • Loading branch information
berrange committed Jun 8, 2016
1 parent 6d310c9 commit 8dfb796
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions libvirt.spec.in
Original file line number Diff line number Diff line change
Expand Up @@ -206,6 +206,12 @@
%define enable_werror --disable-werror
%endif

%if 0%{?fedora} >= 21
%define tls_priority "@SYSTEM"
%else
%define tls_priority "NORMAL"
%endif


Summary: Library providing a simple virtualization API
Name: libvirt
Expand Down Expand Up @@ -1152,6 +1158,7 @@ rm -f po/stamp-po
%{arg_packager_version} \
--with-qemu-user=%{qemu_user} \
--with-qemu-group=%{qemu_group} \
--with-tls-priority=%{tls_priority} \
%{?arg_loader_nvram} \
%{?enable_werror} \
--enable-expensive-tests \
Expand Down

0 comments on commit 8dfb796

Please sign in to comment.