summaryrefslogtreecommitdiff
path: root/src/resolve
diff options
context:
space:
mode:
authorIwan Timmer <irtimmer@gmail.com>2019-10-29 20:26:05 +0100
committerIwan Timmer <irtimmer@gmail.com>2019-10-29 20:26:05 +0100
commit38e053c58fa139e0f546f327b5d8ce3db7cf1647 (patch)
tree20e4b34d657ddb86b192cb801894f78b3cca621a /src/resolve
parent644ee2546102f9aa12b11c28b3c5e80b62beb157 (diff)
downloadsystemd-38e053c58fa139e0f546f327b5d8ce3db7cf1647.tar.gz
resolved: require at least version 3.6.0 of GnuTLS for DNS-over-TLS
Increase the required version to ensure TLS 1.3 is always supported when using GnuTLS for DNS-over-TLS and allow further changes to use recent API additions.
Diffstat (limited to 'src/resolve')
-rw-r--r--src/resolve/resolved-dnstls-gnutls.c4
1 files changed, 0 insertions, 4 deletions
diff --git a/src/resolve/resolved-dnstls-gnutls.c b/src/resolve/resolved-dnstls-gnutls.c
index 7ad9662073..ea276d2c20 100644
--- a/src/resolve/resolved-dnstls-gnutls.c
+++ b/src/resolve/resolved-dnstls-gnutls.c
@@ -9,11 +9,7 @@
#include "resolved-dns-stream.h"
#include "resolved-dnstls.h"
-#if GNUTLS_VERSION_NUMBER >= 0x030600
#define PRIORTY_STRING "NORMAL:-VERS-ALL:+VERS-TLS1.3:+VERS-TLS1.2"
-#else
-#define PRIORTY_STRING "NORMAL:-VERS-ALL:+VERS-TLS1.2"
-#endif
DEFINE_TRIVIAL_CLEANUP_FUNC(gnutls_session_t, gnutls_deinit);
static ssize_t dnstls_stream_writev(gnutls_transport_ptr_t p, const giovec_t *iov, int iovcnt) {