mirror of
https://github.com/xemu-project/xemu.git
synced 2025-02-06 20:16:37 +00:00
crypto: ensure we use a predictable TLS priority setting
The TLS test cert generation relies on a fixed set of algorithms that are only usable under GNUTLS' default priority setting. When building QEMU with a custom distro specific priority setting, this can cause the TLS tests to fail. By forcing the tests to always use "NORMAL" priority we can make them more robust. Reviewed-by: Eric Blake <eblake@redhat.com> Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
This commit is contained in:
parent
00e5e9df29
commit
057ad0b469
@ -75,6 +75,7 @@ static QCryptoTLSCreds *test_tls_creds_create(QCryptoTLSCredsEndpoint endpoint,
|
||||
"server" : "client"),
|
||||
"dir", certdir,
|
||||
"verify-peer", "yes",
|
||||
"priority", "NORMAL",
|
||||
/* We skip initial sanity checks here because we
|
||||
* want to make sure that problems are being
|
||||
* detected at the TLS session validation stage,
|
||||
|
@ -78,6 +78,7 @@ static QCryptoTLSCreds *test_tls_creds_create(QCryptoTLSCredsEndpoint endpoint,
|
||||
"server" : "client"),
|
||||
"dir", certdir,
|
||||
"verify-peer", "yes",
|
||||
"priority", "NORMAL",
|
||||
/* We skip initial sanity checks here because we
|
||||
* want to make sure that problems are being
|
||||
* detected at the TLS session validation stage,
|
||||
|
Loading…
x
Reference in New Issue
Block a user