TakeV/guix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

download: Enable TLS 1.3.

Browse source 
This reverts commit e4ee842026.

* guix/build/download.scm (tls-wrap): Dot not disable TLS 1.3.
This commit is contained in:
Marius Bakke 2019-12-19 00:32:11 +01:00
parent e7453b3cb5
commit 621fb83a1f
No known key found for this signature in database
GPG key ID: A2A06DF2A33A54FA
1 changed files with 2 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
guix/build/download.scm
View file

@ -158,7 +158,7 @@ (define* (ftp-fetch uri file #:key timeout print-build-trace?)
;; See <http://bugs.gnu.org/12202>.
(module-autoload! (current-module)
'(gnutls)
'(gnutls-version make-session connection-end/client))
'(make-session connection-end/client))
(define %tls-ports
;; Mapping of session record ports to the underlying file port.
@ -273,18 +273,7 @@ (define (log level str)
;; "(gnutls) Priority Strings"); see <http://bugs.gnu.org/23311>.
;; Explicitly disable SSLv3, which is insecure:
;; <https://tools.ietf.org/html/rfc7568>.
;;
;; FIXME: Since we currently fail to handle TLS 1.3 (with GnuTLS 3.6.5),
;; remove it; see <https://bugs.gnu.org/34102>.
(set-session-priorities! session
(string-append
"NORMAL:%COMPAT:-VERS-SSL3.0"
;; The "VERS-TLS1.3" priority string is not
;; supported by GnuTLS 3.5.
(if (string-prefix? "3.5." (gnutls-version))
""
":-VERS-TLS1.3")))
(set-session-priorities! session "NORMAL:%COMPAT:-VERS-SSL3.0")
(set-session-credentials! session
(if (and verify-certificate? ca-certs)