Re: [libvirt] [PATCH 9/9] Use @SYSTEM priority for TLS on Fedora >= 21

2016-06-08 Thread Peter Krempa
On Mon, Jun 06, 2016 at 16:09:03 +0100, Daniel Berrange wrote: > In Fedora >= 21, there is a new crypto priority framework > that sets TLS policies globally for all apps. To activate > this with GNUTLS we must request "@SYSTEM" instead of > the traditional "NORMAL" string. The '@' causes gnutls tod

[libvirt] [PATCH 9/9] Use @SYSTEM priority for TLS on Fedora >= 21

2016-06-06 Thread Daniel P. Berrange
In Fedora >= 21, there is a new crypto priority framework that sets TLS policies globally for all apps. To activate this with GNUTLS we must request "@SYSTEM" instead of the traditional "NORMAL" string. The '@' causes gnutls todo a lookup in its config file for the 'SYSTEM' keyword entry. Signed-o