Re: gnutls-file.config rockylinux 8.5

Hello Ivaylo,

"Ivaylo M. Ivanov" <[email protected]> writes:

> Can anyone help me with this problem? Why this lines in gnutls.config
>
> EXAMPLE-PRIORITY=NORMAL:+ARCFOUR-128
> @EXAMPLE-PRIORITY:-VERS-TLS1.0:-VERS-TLS1.1

Do you mean both lines are put in gnutls.config (it's not supposed to
work)?

> is not excluding TLS1.1 in
> gnutls-cli --priority @EXAMPLE-PRIORITY --list

The @-syntax is used to refer a priority defined in the config file.  In
this case, the above command is expanded to:

  gnutls-cli --priority NORMAL:+ARCFOUR-128 --list

If you have the following line instead in gnutls.config:

  EXAMPLE-PRIORITY=NORMAL:+ARCFOUR-128:-VERS-TLS1.0:-VERS-TLS1.1

TLS 1.1 would be excluded.

Regards,
-- 
Daiki Ueno