emacs-base/lisp/init-security.el

13 lines
562 B
EmacsLisp

;;----------------------------------------------------------------------------
;; Security. Check https://ogbe.net/emacsconfig.html
;;----------------------------------------------------------------------------
(setq tls-checktrust t)
(setq gnutls-verify-error t)
(let ((trustfile "/etc/ssl/cert.pem"))
(setq tls-program
`(,(format "gnutls-cli --x509cafile %s -p %%p %%h" trustfile)
,(format "openssl s_client -connect %%h:%%p -CAfile %s -no_ssl2 -ign_eof" trustfile)))
(setq gnutls-trustfiles (list trustfile)))
(provide 'init-security)