emenel/doomemacs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Revise tls-program; rely on default trust stores

Browse source 
Addresses #72 & #80
This commit is contained in:
Henrik Lissner 2017-05-26 20:17:51 +02:00
parent 7fc4447ef6
commit 157eb3e5da
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
core/core-packages.el
View file

@ -85,11 +85,12 @@ base by `doom!' and for calculating how many packages exist.")
;; than pulled, so packages are often out of date with upstream.
;; security settings
gnutls-verify-error (not (getenv "INSECURE")) ; INSECURE is for integrated testing
gnutls-verify-error (not (getenv "INSECURE")) ; you shouldn't use this
tls-checktrust gnutls-verify-error
tls-program (list "gnutls-cli --x509cafile %t -p %p %h"
;; less likely to be secure, but allow for backwards compatibility
"openssl s_client -connect %h:%p -no_ssl2 -ign_eof")
;; compatibility fallbacks
"gnutls-cli -p %p %h"
"openssl s_client -connect %h:%p -no_ssl2 -no_ssl3 -ign_eof")
use-package-always-defer t
use-package-always-ensure nil