Re: [Bug-wget] [PATCH] add PFS (Perfect Forward Security) value to --secure-protocol

[Daniel Kahn Gillmor]

On 09/07/2013 12:10 PM, Daniel Kahn Gillmor wrote:
> it might be better to do a runtime check (e.g. using
> gnutls_check_version(NULL) >= 0x030204) instead of a compile-time check.

sigh.  that is of course the wrong code.  to do a proper runtime check,
it should be:

 if (gnutls_check_version("3.2.4"))
    err = gnutls_priority_set_direct (session, "PFS", NULL);
 else
    err = gnutls_priority_set_direct (session, "NORMAL:-RSA", NULL);

sorry to have botched that the first time around.

        --dkg

signature.asc
Description: OpenPGP digital signature