aboutsummaryrefslogtreecommitdiffstats
path: root/modules/init-security.el
blob: 68b1eb64af9c67d7876b7f67ab590477be72857b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
;;; init-security.el --- .Emacs Configuration -*- lexical-binding: t -*-
;;; Commentary:
;;

;;; Code:
;;---------------------------------------------------------------------------------------------
;; Security. Check https://web.archive.org/web/20170413150436/https://ogbe.net/emacsconfig.html
;;---------------------------------------------------------------------------------------------
(setq tls-checktrust t)
(setq gnutls-verify-error t)
(let ((trustfile "/etc/ssl/cert.pem"))
  (setq tls-program
        `(,(format  "gnutls-cli --x509cafile %s -p %%p %%h" trustfile)
          ,(format "openssl s_client -connect %%h:%%p -CAfile %s -no_ssl2 -ign_eof" trustfile)))
  (setq gnutls-trustfiles (list trustfile)))

(provide 'init-security)

;; Local Variables:
;; byte-compile-warnings: (not free-vars)
;; End:
;;; init-security.el ends here