s3:lib:tls: Use better priority lists for modern GnuTLS
authorAndreas Schneider <asn@samba.org>
Mon, 15 Jun 2020 09:50:16 +0000 (11:50 +0200)
committerAndreas Schneider <asn@cryptomilk.org>
Wed, 17 Jun 2020 17:42:02 +0000 (17:42 +0000)
commit53e3a959b958a3b099df6ecc5f6e294e96bd948e
tree63e0cbc0729147a8a868c714f6ea9782628c6f6c
parent3d1b6ddcd0a1cee2eaeed5cc8bb38a8e8cdc1891
s3:lib:tls: Use better priority lists for modern GnuTLS

We should use the default priority list. That is a good practice,
because TLS protocol hardening and phasing out of legacy algorithms,
is easier to co-ordinate when happens at a single place. See crypto
policies of Fedora.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14408

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Jun 17 17:42:02 UTC 2020 on sn-devel-184
docs-xml/smbdotconf/security/tlspriority.xml
lib/param/loadparm.c
python/samba/tests/docs.py
source3/param/loadparm.c
source4/lib/tls/tls_tstream.c
wscript_configure_system_gnutls