diff options
| author | Daiki Ueno <ueno@gnu.org> | 2022-12-17 15:55:33 +0900 |
|---|---|---|
| committer | Daiki Ueno <ueno@gnu.org> | 2022-12-19 17:25:16 +0900 |
| commit | 3d7459d10a72a7f583dd8c1d0be009c346d863b8 (patch) | |
| tree | d1786af82085096d2c09ce2e6a019c1bc3ec369b /m4 | |
| parent | 6d8ea338eb29a8e8b333150a8459aab77f3ef65e (diff) | |
| download | gnutls-3d7459d10a72a7f583dd8c1d0be009c346d863b8.tar.gz | |
build: disable TLS heartbeat extension by default
The heartbeat extension in TLS (RFC 6520) is not widely used given
other implementations dropped support for it. This makes it disabled
by default, though the users are able to enable it back with the
--enable-heartbeat-support configure option.
Signed-off-by: Daiki Ueno <ueno@gnu.org>
Diffstat (limited to 'm4')
| -rw-r--r-- | m4/hooks.m4 | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/m4/hooks.m4 b/m4/hooks.m4 index f3cdaa8586..10e23afc54 100644 --- a/m4/hooks.m4 +++ b/m4/hooks.m4 @@ -232,11 +232,11 @@ LIBTASN1_MINIMUM=4.9 fi AM_CONDITIONAL(ENABLE_ALPN, test "$ac_enable_alpn" != "no") - ac_enable_heartbeat=yes + ac_enable_heartbeat=no AC_MSG_CHECKING([whether to enable TLS heartbeat support]) AC_ARG_ENABLE(heartbeat-support, - AS_HELP_STRING([--disable-heartbeat-support], - [disable support for the heartbeat extension]), + AS_HELP_STRING([--enable-heartbeat-support], + [enable support for the heartbeat extension]), ac_enable_heartbeat=$enableval) if test x$ac_enable_heartbeat != xno; then AC_MSG_RESULT(yes) |