1234567891011121314151617181920212223 |
- (setq tls-checktrust t)
- (setq gnutls-verify-error t)
- (let ((trustfile "/etc/ssl/cert.pem"))
- (setq tls-program
- `(,(format "gnutls-cli --x509cafile %s -p %%p %%h" trustfile)
- ,(format "openssl s_client -connect %%h:%%p -CAfile %s -no_ssl2 -ign_eof" trustfile)))
- (setq gnutls-trustfiles (list trustfile)))
- (provide 'init-security)
|