diff options
| author | Daiki Ueno <ueno@gnu.org> | 2021-05-06 12:41:40 +0200 |
|---|---|---|
| committer | Daiki Ueno <ueno@gnu.org> | 2021-11-29 13:21:53 +0100 |
| commit | 0ecce7191dfd78387f2994253d37ed1df50d563d (patch) | |
| tree | fb1d66e9329cdad3ef617c02b96c77aca1c8dd3e /devel/libgnutls.abignore | |
| parent | ee3af8d6e863bd958cbe7468f9cbe09d803f4e92 (diff) | |
| download | gnutls-0ecce7191dfd78387f2994253d37ed1df50d563d.tar.gz | |
priority: support allowlisting in configuration file
This adds a new mode of interpreting the [overrides] section. If
"override-mode" is set to "allowlisting" in the [global] section, all
the algorithms (hashes, signature algorithms, curves, and versions)
are initially marked as insecure/disabled. Then the user can enable
them by specifying allowlisting keywords such as "secure-hash" in the
[overrides] section.
Signed-off-by: Daiki Ueno <ueno@gnu.org>
Co-authored-by: Alexander Sosedkin <asosedkin@redhat.com>
Diffstat (limited to 'devel/libgnutls.abignore')
| -rw-r--r-- | devel/libgnutls.abignore | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/devel/libgnutls.abignore b/devel/libgnutls.abignore index e43e5472f3..8afa94148a 100644 --- a/devel/libgnutls.abignore +++ b/devel/libgnutls.abignore @@ -57,3 +57,17 @@ return_type_name = unsigned int # The following should be removed in the new release, after updating the # abi-dump repository: +[suppress_function] +name = gnutls_digest_set_secure + +[suppress_function] +name = gnutls_ecc_curve_set_enabled + +[suppress_function] +name = gnutls_protocol_set_enabled + +[suppress_function] +name = gnutls_sign_set_secure + +[suppress_function] +name = gnutls_sign_set_secure_for_certs |