summaryrefslogtreecommitdiff
path: root/wscript_configure_system_gnutls
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2019-08-15 14:25:41 +1200
committerAndreas Schneider <asn@cryptomilk.org>2019-08-21 09:57:31 +0000
commit974cebdf953259f41ecfc7375bc31d72af53f51e (patch)
treeae8802afef48fffbbe91034274ca91fb1adbb07b /wscript_configure_system_gnutls
parent1f6104f09a30cf3816fd5a580ce1b4be5b94848c (diff)
downloadsamba-974cebdf953259f41ecfc7375bc31d72af53f51e.tar.gz
build: Set minimum GnuTLS version at 3.4.7
This will soon be required for encrypted_secrets in the AD DC, the BackupKey server and SMB2 as we remove use of the internal AES code. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
Diffstat (limited to 'wscript_configure_system_gnutls')
-rw-r--r--wscript_configure_system_gnutls11
1 files changed, 1 insertions, 10 deletions
diff --git a/wscript_configure_system_gnutls b/wscript_configure_system_gnutls
index 85824aad4ed..8ff0529e10c 100644
--- a/wscript_configure_system_gnutls
+++ b/wscript_configure_system_gnutls
@@ -1,17 +1,9 @@
from waflib import Options
-gnutls_min_required_version = "3.2.0"
+gnutls_min_required_version = "3.4.7"
gnutls_required_version = gnutls_min_required_version
-#
-# If we build with MIT Kerberos we need at least GnuTLS 3.4.7 for the backupkey
-# protocol.
-#
-if Options.options.with_system_mitkrb5 and conf.env.AD_DC_BUILD_IS_ENABLED:
- gnutls_required_version = "3.4.7"
- conf.DEFINE('HAVE_GNUTLS_3_4_7', 1)
-
conf.CHECK_CFG(package='gnutls',
args=('"gnutls >= %s" --cflags --libs' % gnutls_required_version),
msg='Checking for GnuTLS >= %s' % gnutls_required_version,
@@ -39,6 +31,5 @@ else:
if conf.CHECK_VALUEOF('GNUTLS_CIPHER_AES_128_CFB8', headers='gnutls/gnutls.h'):
conf.DEFINE('HAVE_GNUTLS_AES_CFB8', 1)
- conf.DEFINE('HAVE_GNUTLS_3_4_7', 1)
else:
Logs.warn('No gnutls support for AES CFB8')