[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: poodle

At Wed, 15 Oct 2014 23:23:28 +0900 (JST),
Tatsuya Kinoshita wrote:
> 
> On October 15, 2014, [Wanderlust English:05801], randy (at psg.com) wrote:
> > it seems my wl wants sslv3 for imap by default, which is no longer cool.
> > got any recipes?
> 
> The gnutls-cli command is used in Debian, so I'm thinking about the
> following configuration to disable SSLv3.
> 
>     (setq ssl-program-name "gnutls-cli")
>     (setq ssl-program-arguments
>           '("--port" service
>             "--x509cafile" "/etc/ssl/certs/ca-certificates.crt"
>             "--priority" "NORMAL:-VERS-SSL3.0"
>             host))
> 
> Comments?
> 

This should do the trick. In case Emacs uses the built-in GnuTLS
support:

(setq gnutls-algorithm-priority "NORMAL:-VERS-SSL3.0")


Best, 
  -- David

> Thanks,
> -- 
> Tatsuya Kinoshita
> 

-- 
OpenPGP... 0x99ADB83B5A4478E6
Jabber.... dmjena@jabber.org
Email..... dmaus@ictsoc.de