On 08/04/2016 03:57 AM, Daniel P. Berrange wrote:
With newest gnutls available in Fedora 25/rawhide, it is
possible to have TLS priority fallbacks, so we can finally
use --tls-priority=@LIBVIRT,SYSTEM
Signed-off-by: Daniel P. Berrange <berrange(a)redhat.com>
---
libvirt.spec.in | 10 +++++++---
1 file changed, 7 insertions(+), 3 deletions(-)
diff --git a/libvirt.spec.in b/libvirt.spec.in
index d3986bb..a389e88 100644
--- a/libvirt.spec.in
+++ b/libvirt.spec.in
@@ -206,10 +206,14 @@
%define enable_werror --disable-werror
%endif
-%if 0%{?fedora} >= 21
- %define tls_priority "@SYSTEM"
+%if 0%{?fedora} >= 25
+ %define tls_priority "@LIBVIRT,SYSTEM"
%else
- %define tls_priority "NORMAL"
+ %if 0%{?fedora} >= 21
+ %define tls_priority "@SYSTEM"
+ %else
+ %define tls_priority "NORMAL"
+ %endif
%endif
ACK
- Cole