aboutsummaryrefslogtreecommitdiffstats
path: root/lisp/init-security.el
diff options
context:
space:
mode:
authorJesús <heckyel@hyperbola.info>2018-08-09 19:05:47 -0500
committerJesús <heckyel@hyperbola.info>2018-08-09 19:05:47 -0500
commit532be544895ab159084c695903755ccfe1737ff0 (patch)
tree5fe5ce9169e72d15c3c683eed36537db7ce0d671 /lisp/init-security.el
parente81fd91879c4daa9834b5a3fa71b9ad0bf076e00 (diff)
downloademacs-base-532be544895ab159084c695903755ccfe1737ff0.tar.lz
emacs-base-532be544895ab159084c695903755ccfe1737ff0.tar.xz
emacs-base-532be544895ab159084c695903755ccfe1737ff0.zip
impor features from emacs-personal
→ https://gitlab.com/heckyel-ng/emacs-personal
Diffstat (limited to 'lisp/init-security.el')
-rw-r--r--lisp/init-security.el12
1 files changed, 12 insertions, 0 deletions
diff --git a/lisp/init-security.el b/lisp/init-security.el
new file mode 100644
index 0000000..87d4a0c
--- /dev/null
+++ b/lisp/init-security.el
@@ -0,0 +1,12 @@
+;;----------------------------------------------------------------------------
+;; Security. Check https://ogbe.net/emacsconfig.html
+;;----------------------------------------------------------------------------
+(setq tls-checktrust t)
+(setq gnutls-verify-error t)
+(let ((trustfile "/etc/ssl/cert.pem"))
+ (setq tls-program
+ `(,(format "gnutls-cli --x509cafile %s -p %%p %%h" trustfile)
+ ,(format "openssl s_client -connect %%h:%%p -CAfile %s -no_ssl2 -ign_eof" trustfile)))
+ (setq gnutls-trustfiles (list trustfile)))
+
+(provide 'init-security)