tls: Use NORMAL:-VERS-SSL3.0 as the default configuration

[samba.git] / source3 / param / loadparm.c

diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index 0ceaa7d8edf0b9bdc866e6161d471320d596e120..cf5da0aca21c8170de3e059664abda02a14e446a 100644 (file)
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -886,15 +886,9 @@ static void init_globals(struct loadparm_context *lp_ctx, bool reinit_globals)
        lpcfg_string_set(Globals.ctx, &Globals._tls_keyfile, "tls/key.pem");
        lpcfg_string_set(Globals.ctx, &Globals._tls_certfile, "tls/cert.pem");
        lpcfg_string_set(Globals.ctx, &Globals._tls_cafile, "tls/ca.pem");
-#ifdef HAVE_GNUTLS_SET_DEFAULT_PRIORITY_APPEND
        lpcfg_string_set(Globals.ctx,
                         &Globals.tls_priority,
-                        "@SAMBA,SYSTEM,NORMAL:!-VERS-SSL3.0");
-#else
-       lpcfg_string_set(Globals.ctx,
-                        &Globals.tls_priority,
-                        "NORMAL!-VERS-SSL3.0");
-#endif
+                        "NORMAL:-VERS-SSL3.0");
 
        lpcfg_string_set(Globals.ctx, &Globals.share_backend, "classic");