diff options
| author | Andreas Schneider <asn@samba.org> | 2020-06-30 17:12:17 +0200 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2020-07-01 14:56:33 +0000 |
| commit | d30865014569f4b9a1261d9f0c40bc4fc98f883e (patch) | |
| tree | 8813ccb24f72463f39b661786a1e1a9d22ef0cb6 /docs-xml | |
| parent | cabf873b75b1d4d456190358bc3ed051bca16978 (diff) | |
| download | samba-d30865014569f4b9a1261d9f0c40bc4fc98f883e.tar.gz | |
tls: Use NORMAL:-VERS-SSL3.0 as the default configuration
This seems to be really broken in GnuTLS and the documentation is also
not correct.
This partially reverts 53e3a959b958a3b099df6ecc5f6e294e96bd948e
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14408
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Wed Jul 1 14:56:33 UTC 2020 on sn-devel-184
Diffstat (limited to 'docs-xml')
| -rw-r--r-- | docs-xml/smbdotconf/security/tlspriority.xml | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/docs-xml/smbdotconf/security/tlspriority.xml b/docs-xml/smbdotconf/security/tlspriority.xml index 6d1f0dcb912..471dc25ba3b 100644 --- a/docs-xml/smbdotconf/security/tlspriority.xml +++ b/docs-xml/smbdotconf/security/tlspriority.xml @@ -12,10 +12,8 @@ <ulink url="http://gnutls.org/manual/html_node/Priority-Strings.html">GNUTLS Priority-Strings documentation at http://gnutls.org/manual/html_node/Priority-Strings.html</ulink> </para> - <para>By default it will try to find a config file matching "SAMBA", but if - that does not exist will use the entry for "SYSTEM" and last fallback to - NORMAL. In all cases the SSL3.0 protocol will be disabled.</para> + <para>The SSL3.0 protocol will be disabled.</para> </description> - <value type="default">@SAMBA,SYSTEM,NORMAL:!-VERS-SSL3.0</value> + <value type="default">NORMAL:-VERS-SSL3.0</value> </samba:parameter> |