On 08/04/2016 03:57 AM, Daniel P. Berrange wrote:

With newest gnutls available in Fedora 25/rawhide, it is possible to have TLS priority fallbacks, so we can finally use --tls-priority=@LIBVIRT,SYSTEM

Signed-off-by: Daniel P. Berrange <berrange@redhat.com> --- libvirt.spec.in | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/libvirt.spec.in b/libvirt.spec.in index d3986bb..a389e88 100644 --- a/libvirt.spec.in +++ b/libvirt.spec.in @@ -206,10 +206,14 @@ %define enable_werror --disable-werror %endif

-%if 0%{?fedora} >= 21 - %define tls_priority "@SYSTEM" +%if 0%{?fedora} >= 25 + %define tls_priority "@LIBVIRT,SYSTEM" %else - %define tls_priority "NORMAL" + %if 0%{?fedora} >= 21 + %define tls_priority "@SYSTEM" + %else + %define tls_priority "NORMAL" + %endif %endif

ACK - Cole