Please convert this application to use the system's crypto policy for SSL and TLS: https://fedoraproject.org/wiki/Packaging:CryptoPolicies If this program is compiled against gnutls, change the default priority string to be "@SYSTEM" or to use gnutls_set_default_priority(). If this program is compiled against openssl, and there is no default cipher list specified, you don't need to modify it. Otherwise replace the default cipher list with "PROFILE=SYSTEM". In both cases please verify that the application uses the system's crypto policies. If the package is already using the system-wide crypto policies, or it does not use SSL or TLS, no action is required, the bug can simply be closed.
Created attachment 1001405 [details] patch to utilize @SYSTEM
An other approach which could also be sent upstream is to use: gnutls_set_default_priority(session) That way it avoids being Fedora-specific.
Can you expand on that? At what point does this call need to happen? IIUC, gnutls_set_default_priority has to be called for each session separately. For a consumer of the µhttp library like systemd-journal-remote this is more complicated.
(In reply to Zbigniew Jędrzejewski-Szmek from comment #3) > Can you expand on that? At what point does this call need to happen? IIUC, > gnutls_set_default_priority has to be called for each session separately. You're right... Ignore my comment.
libmicrohttpd-0.9.39-2.fc22 has been submitted as an update for Fedora 22. https://admin.fedoraproject.org/updates/libmicrohttpd-0.9.39-2.fc22
libmicrohttpd-0.9.39-2.fc21 has been submitted as an update for Fedora 21. https://admin.fedoraproject.org/updates/libmicrohttpd-0.9.39-2.fc21
Package libmicrohttpd-0.9.39-2.fc21: * should fix your issue, * was pushed to the Fedora 21 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing libmicrohttpd-0.9.39-2.fc21' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2015-4035/libmicrohttpd-0.9.39-2.fc21 then log in and leave karma (feedback).
libmicrohttpd-0.9.39-2.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
libmicrohttpd-0.9.39-2.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.