From: Lars Ingebrigtsen Date: Fri, 23 Aug 2019 09:00:02 +0000 (+0200) Subject: Move all NSM tests away from the `low' level X-Git-Tag: emacs-27.0.90~1328^2~103 X-Git-Url: http://git.eshelyaron.com/gitweb/?a=commitdiff_plain;h=7b0d49854675eae962c6baf8ae6fd90a2c87889b;p=emacs.git Move all NSM tests away from the `low' level * lisp/net/nsm.el (network-security-level, nsm-tls-checks): Make `low' a "check nothing" setting again, and move all the `low' checks back to `medium'. This makes the test suite work again. --- diff --git a/lisp/net/nsm.el b/lisp/net/nsm.el index 7ebd0c48727..69dc86f76fd 100644 --- a/lisp/net/nsm.el +++ b/lisp/net/nsm.el @@ -46,7 +46,7 @@ connection should be handled. The following values are possible: -`low': Only the most basic checks are performed -- very insecure. +`low': No checks are performed: This is extremely insecure. `medium': Default. Suitable for most circumstances. `high': Warns about additional issues not enabled in `medium' due to compatibility concerns. @@ -140,16 +140,16 @@ unencrypted." (defcustom nsm-tls-checks '(;; Old Known Weaknesses. - (nsm-tls-check-version . low) - (nsm-tls-check-compression . low) - (nsm-tls-check-renegotiation-info-ext . low) - (nsm-tls-check-verify-cert . low) - (nsm-tls-check-same-cert . low) - (nsm-tls-check-null-suite . low) - (nsm-tls-check-export-kx . low) - (nsm-tls-check-anon-kx . low) - (nsm-tls-check-md5-sig . low) - (nsm-tls-check-rc4-cipher . low) + (nsm-tls-check-version . medium) + (nsm-tls-check-compression . medium) + (nsm-tls-check-renegotiation-info-ext . medium) + (nsm-tls-check-verify-cert . medium) + (nsm-tls-check-same-cert . medium) + (nsm-tls-check-null-suite . medium) + (nsm-tls-check-export-kx . medium) + (nsm-tls-check-anon-kx . medium) + (nsm-tls-check-md5-sig . medium) + (nsm-tls-check-rc4-cipher . medium) ;; Weaknesses made known after 2013. (nsm-tls-check-dhe-prime-kx . medium) (nsm-tls-check-sha1-sig . medium)