Blame SOURCES/0040-Use-system-wide-crypto-policy.patch

f22e83
From b83be8b4f86bf1a8a6de4802a9486d084c4a46cd Mon Sep 17 00:00:00 2001
f22e83
From: Martin Sehnoutka <msehnout@redhat.com>
f22e83
Date: Tue, 29 Aug 2017 10:32:16 +0200
f22e83
Subject: [PATCH 40/59] Use system wide crypto policy
f22e83
f22e83
Resolves: rhbz#1483970
f22e83
---
f22e83
 tunables.c | 3 +--
f22e83
 1 file changed, 1 insertion(+), 2 deletions(-)
f22e83
f22e83
diff --git a/tunables.c b/tunables.c
f22e83
index 5440c00..354251c 100644
f22e83
--- a/tunables.c
f22e83
+++ b/tunables.c
f22e83
@@ -297,8 +297,7 @@ tunables_load_defaults()
f22e83
   install_str_setting(0, &tunable_dsa_cert_file);
f22e83
   install_str_setting(0, &tunable_dh_param_file);
f22e83
   install_str_setting(0, &tunable_ecdh_param_file);
f22e83
-  install_str_setting("AES128-SHA:DES-CBC3-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384",
f22e83
-          &tunable_ssl_ciphers);
f22e83
+  install_str_setting("PROFILE=SYSTEM", &tunable_ssl_ciphers);
f22e83
   install_str_setting(0, &tunable_rsa_private_key_file);
f22e83
   install_str_setting(0, &tunable_dsa_private_key_file);
f22e83
   install_str_setting(0, &tunable_ca_certs_file);
f22e83
-- 
f22e83
2.14.4
f22e83