mirror/emacs
1
0
Fork 0
mirror of https://git.savannah.gnu.org/git/emacs.git synced 2024-12-17 10:06:13 +00:00
Code Issues Releases Activity

Mention the NSM in the gnutls variable doc strings

Browse Source 
* gnutls.el (gnutls-algorithm-priority): Mention the Network
Security Manager here since this variable is an obvious place
for people concerned about network security to look.
(gnutls-verify-error): Ditto.
(gnutls-min-prime-bits): Ditto.
This commit is contained in:
Lars Ingebrigtsen 2018-06-24 14:48:30 +02:00
parent 40c2ce743b
commit 3302b7cd7f
1 changed files with 22 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
lisp/net/gnutls.el
View File

@ -46,7 +46,13 @@
(defcustom gnutls-algorithm-priority nil
"If non-nil, this should be a TLS priority string.
For instance, if you want to skip the \"dhe-rsa\" algorithm,
set this variable to \"normal:-dhe-rsa\"."
set this variable to \"normal:-dhe-rsa\".
This variable can be useful for modifying low-level TLS
connection parameters (for instance if you need to connect to a
host that only accepts a specific algorithm), but general Emacs
network security is handled by the Network Security Manager. See
Info node `(emacs) Network Security'."
:group 'gnutls
:type '(choice (const nil)
string))
@ -72,7 +78,13 @@ corresponding conditions to be tested are:
If the condition test fails, an error will be signaled.
If the value of this variable is t, every connection will be subjected
to all of the tests described above."
to all of the tests described above.
The default value of this variable is nil, which means that no
checks are performed at the gnutls level. Instead the checks are
performed via `open-network-stream' at a higher level by the
Network Security Manager. See Info node `(emacs) Network
Security'."
:group 'gnutls
:version "24.4"
:type '(choice
@ -111,7 +123,14 @@ number with fewer than this number of bits, the handshake is
rejected. \(The smaller the prime number, the less secure the
key exchange is against man-in-the-middle attacks.)
A value of nil says to use the default GnuTLS value."
A value of nil says to use the default GnuTLS value.
The default value of this variable is such that virtually any
connection can be established, whether this connection can be
considered cryptographically \"safe\" or not. However, Emacs
network security is handled at a higher level via
`open-network-stream' and the Network Security Manager. See Info
node `(emacs) Network Security'."
:type '(choice (const :tag "Use default value" nil)
(integer :tag "Number of bits" 512))
:group 'gnutls)