With newest gnutls available in Fedora 25/rawhide, it is possible to have TLS priority fallbacks, so we can finally use --tls-priority=@LIBVIRT,SYSTEM Signed-off-by: Daniel P. Berrange <berrange(a)redhat.com&gt; --- libvirt.spec.in | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/libvirt.spec.in b/libvirt.spec.in index d3986bb..a389e88 100644 --- a/libvirt.spec.in +++ b/libvirt.spec.in @@ -206,10 +206,14 @@ %define enable_werror --disable-werror %endif -%if 0%{?fedora} >= 21 - %define tls_priority "@SYSTEM" +%if 0%{?fedora} >= 25 + %define tls_priority "@LIBVIRT,SYSTEM" %else - %define tls_priority "NORMAL" + %if 0%{?fedora} >= 21 + %define tls_priority "@SYSTEM" + %else + %define tls_priority "NORMAL" + %endif %endif