aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--init.el1
-rw-r--r--lisp/init-security.el12
2 files changed, 13 insertions, 0 deletions
diff --git a/init.el b/init.el
index 6b23dde..a6c43da 100644
--- a/init.el
+++ b/init.el
@@ -23,6 +23,7 @@
;;;------------------------------
;;; Features
;;;------------------------------
+(require 'init-security)
(require 'init-elpa)
;; theme
(require 'init-theme)
diff --git a/lisp/init-security.el b/lisp/init-security.el
new file mode 100644
index 0000000..87d4a0c
--- /dev/null
+++ b/lisp/init-security.el
@@ -0,0 +1,12 @@
+;;----------------------------------------------------------------------------
+;; Security. Check https://ogbe.net/emacsconfig.html
+;;----------------------------------------------------------------------------
+(setq tls-checktrust t)
+(setq gnutls-verify-error t)
+(let ((trustfile "/etc/ssl/cert.pem"))
+ (setq tls-program
+ `(,(format "gnutls-cli --x509cafile %s -p %%p %%h" trustfile)
+ ,(format "openssl s_client -connect %%h:%%p -CAfile %s -no_ssl2 -ign_eof" trustfile)))
+ (setq gnutls-trustfiles (list trustfile)))
+
+(provide 'init-security)