diff options
| author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2018-08-20 15:17:04 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2018-09-12 17:11:06 +0200 |
| commit | 470a4e82449bb3920adb554151cf763722ff472e (patch) | |
| tree | c425ecc6077e203f6d7660116e34aac976a8e3d5 /doc/cha-gtls-app.texi | |
| parent | 90a71b2e53e9696bd4c07ff98a12d06ecd2e424d (diff) | |
| download | gnutls-470a4e82449bb3920adb554151cf763722ff472e.tar.gz | |
priority: be backwards compatible with priority strings starting with NONE
That is, we allow priority strings which do not enable any groups to
work, by disabling TLS1.3. For example
'NONE:+VERS-TLS-ALL:+MAC-ALL:+RSA:+AES-128-GCM:+SIGN-ALL:+COMP-NULL'
is still operational, but no TLS1.3 is enabled when specified.
Resolves: #549
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
Diffstat (limited to 'doc/cha-gtls-app.texi')
| -rw-r--r-- | doc/cha-gtls-app.texi | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/doc/cha-gtls-app.texi b/doc/cha-gtls-app.texi index 9a4cf29933..c7a87a5a22 100644 --- a/doc/cha-gtls-app.texi +++ b/doc/cha-gtls-app.texi @@ -1185,10 +1185,10 @@ verification profile. Means nothing is enabled. This disables even protocol versions. It should be followed by the algorithms to be enabled. Note that using this option to build a priority string gives detailed control -into the resulting settings, however it creates non-portable applications. -With new revisions of the TLS protocol new priority items are routinely added -requiring such a string to be continuously updated with the library. As -such, we advice against using that option for applications targetting multiple versions +into the resulting settings, however with new revisions of the TLS protocol +new priority items are routinely added, and such strings are not +forward compatible with new protocols. As such, we +advice against using that option for applications targetting multiple versions of the GnuTLS library, and recommend using the defaults (see above) or adjusting the defaults via @funcref{gnutls_set_default_priority_append}. |