46
46
<emphasis>not</emphasis> run in debug mode.
49
<para id="priority_compat">
50
50
GnuTLS priority string for the <acronym>TLS</acronym> handshake.
51
The default is <quote><literal
52
>SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP:+SIGN-RSA-SHA224:</literal>
53
<literal>+SIGN-RSA-RMD160</literal></quote>.
54
See <citerefentry><refentrytitle
52
<quote><literal>SECURE128​:!CTYPE-X.509​:+CTYPE-RAWPK​:!RSA​:!VERS-ALL​:+VERS-TLS1.3​:%PROFILE_ULTRA</literal></quote>
53
when using raw public keys in TLS, and
54
<quote><literal>SECURE256​:!CTYPE-X.509​:+CTYPE-OPENPGP​:!RSA​:+SIGN-DSA-SHA256</literal></quote>
55
when using OpenPGP keys in TLS,. See <citerefentry><refentrytitle
55
56
>gnutls_priority_init</refentrytitle>
56
57
<manvolnum>3</manvolnum></citerefentry> for the syntax.
57
58
<emphasis>Warning</emphasis>: changing this may make the
58
59
<acronym>TLS</acronym> handshake fail, making server-client
59
communication impossible.
63
GnuTLS priority string for the <acronym>TLS</acronym> handshake.
64
The default is <quote><literal
65
>SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP</literal></quote>. See
66
<citerefentry><refentrytitle >gnutls_priority_init</refentrytitle>
67
<manvolnum>3</manvolnum></citerefentry> for the syntax.
68
<emphasis>Warning</emphasis>: changing this may make the
69
<acronym>TLS</acronym> handshake fail, making server-client
70
communication impossible.
60
communication impossible. Changing this option may also make the
61
network traffic decryptable by an attacker.
73
64
<para id="servicename">
added
removed
mandos-options.xml
