emenel/doomemacs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix TLS error caused by #2763

Browse source 
Check whether the current gnutls library supports tls1.3
Add more tests for `doom/am-i-secure`
This commit is contained in:
Vu Quoc Huy 2020-03-28 02:20:10 +01:00
parent bf3cdc37ce
commit 9709d257d9
3 changed files with 37 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
core/core.el
View file

@ -181,7 +181,9 @@ users).")
;; pulls in from all corners of the globe. Let's at least try to be more
;; discerning.
(setq gnutls-verify-error (not (getenv "INSECURE"))
gnutls-algorithm-priority "SECURE128:+SECURE192:-VERS-ALL:+VERS-TLS1.2:+VERS-TLS1.3"
gnutls-algorithm-priority
(let ((support-tls1.3 (if (>= libgnutls-version 30605) ":+VERS-TLS1.3" nil)))
(concat "SECURE128:+SECURE192:-VERS-ALL:+VERS-TLS1.2" support-tls1.3))
;; `gnutls-min-prime-bits' is set based on recommendations from
;; https://www.keylength.com/en/4/
gnutls-min-prime-bits 3072