Commit 7b0d4985 authored by Lars Ingebrigtsen's avatar Lars Ingebrigtsen

Move all NSM tests away from the `low' level

* lisp/net/nsm.el (network-security-level, nsm-tls-checks): Make
`low' a "check nothing" setting again, and move all the `low'
checks back to `medium'.  This makes the test suite work again.
parent 15c4a822
Pipeline #2956 failed with stage
in 3 minutes and 30 seconds
......@@ -46,7 +46,7 @@ connection should be handled.
The following values are possible:
`low': Only the most basic checks are performed -- very insecure.
`low': No checks are performed: This is extremely insecure.
`medium': Default. Suitable for most circumstances.
`high': Warns about additional issues not enabled in `medium' due to
compatibility concerns.
......@@ -140,16 +140,16 @@ unencrypted."
(defcustom nsm-tls-checks
'(;; Old Known Weaknesses.
(nsm-tls-check-version . low)
(nsm-tls-check-compression . low)
(nsm-tls-check-renegotiation-info-ext . low)
(nsm-tls-check-verify-cert . low)
(nsm-tls-check-same-cert . low)
(nsm-tls-check-null-suite . low)
(nsm-tls-check-export-kx . low)
(nsm-tls-check-anon-kx . low)
(nsm-tls-check-md5-sig . low)
(nsm-tls-check-rc4-cipher . low)
(nsm-tls-check-version . medium)
(nsm-tls-check-compression . medium)
(nsm-tls-check-renegotiation-info-ext . medium)
(nsm-tls-check-verify-cert . medium)
(nsm-tls-check-same-cert . medium)
(nsm-tls-check-null-suite . medium)
(nsm-tls-check-export-kx . medium)
(nsm-tls-check-anon-kx . medium)
(nsm-tls-check-md5-sig . medium)
(nsm-tls-check-rc4-cipher . medium)
;; Weaknesses made known after 2013.
(nsm-tls-check-dhe-prime-kx . medium)
(nsm-tls-check-sha1-sig . medium)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment