From 377134dda4e5ef82b1061826e6d26c4168b57af7 Mon Sep 17 00:00:00 2001 From: Packit Service Date: Dec 09 2020 20:51:53 +0000 Subject: Apply patch LibVNCServer-0.9.10-system-crypto-policy.patch patch_name: LibVNCServer-0.9.10-system-crypto-policy.patch present_in_specfile: true --- diff --git a/libvncclient/tls_gnutls.c b/libvncclient/tls_gnutls.c index b9ffe89..8e50cd7 100644 --- a/libvncclient/tls_gnutls.c +++ b/libvncclient/tls_gnutls.c @@ -31,8 +31,8 @@ #include "tls.h" -static const char *rfbTLSPriority = "NORMAL:+DHE-DSS:+RSA:+DHE-RSA:+SRP"; -static const char *rfbAnonTLSPriority= "NORMAL:+ANON-DH"; +static const char *rfbTLSPriority = "@SYSTEM"; +static const char *rfbAnonTLSPriority= "@SYSTEM:+ANON-DH"; #define DH_BITS 1024 static gnutls_dh_params_t rfbDHParams; diff --git a/libvncserver/rfbssl_gnutls.c b/libvncserver/rfbssl_gnutls.c index e58cdad..12379e9 100644 --- a/libvncserver/rfbssl_gnutls.c +++ b/libvncserver/rfbssl_gnutls.c @@ -54,7 +54,7 @@ static int rfbssl_init_session(struct rfbssl_ctx *ctx, int fd) if (!GNUTLS_E_SUCCESS == (ret = gnutls_init(&session, GNUTLS_SERVER))) { /* */ - } else if (!GNUTLS_E_SUCCESS == (ret = gnutls_priority_set_direct(session, "EXPORT", NULL))) { + } else if (!GNUTLS_E_SUCCESS == (ret = gnutls_set_default_priority(session))) { /* */ } else if (!GNUTLS_E_SUCCESS == (ret = gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, ctx->x509_cred))) { /* */