With newest gnutls available in Fedora 25/rawhide, it is possible to have TLS priority fallbacks, so we can finally use --tls-priority=@LIBVIRT,SYSTEM Signed-off-by: Daniel P. Berrange <berrange@xxxxxxxxxx> --- libvirt.spec.in | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/libvirt.spec.in b/libvirt.spec.in index d3986bb..a389e88 100644 --- a/libvirt.spec.in +++ b/libvirt.spec.in @@ -206,10 +206,14 @@ %define enable_werror --disable-werror %endif -%if 0%{?fedora} >= 21 - %define tls_priority "@SYSTEM" +%if 0%{?fedora} >= 25 + %define tls_priority "@LIBVIRT,SYSTEM" %else - %define tls_priority "NORMAL" + %if 0%{?fedora} >= 21 + %define tls_priority "@SYSTEM" + %else + %define tls_priority "NORMAL" + %endif %endif -- 2.7.4 -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list