File u_tigervnc-prioritize-anon-ecdh.patch of Package tigervnc.1955

Index: tigervnc-1.4.1/common/rfb/CSecurityTLS.cxx
===================================================================
--- tigervnc-1.4.1.orig/common/rfb/CSecurityTLS.cxx
+++ tigervnc-1.4.1/common/rfb/CSecurityTLS.cxx
@@ -202,7 +202,7 @@ bool CSecurityTLS::processMsg(CConnectio
 
 void CSecurityTLS::setParam()
 {
-  static const int kx_anon_priority[] = { GNUTLS_KX_ANON_DH, 0 };
+  static const int kx_anon_priority[] = { GNUTLS_KX_ANON_ECDH, GNUTLS_KX_ANON_DH, 0 };
   static const int kx_priority[] = { GNUTLS_KX_DHE_DSS, GNUTLS_KX_RSA,
 				     GNUTLS_KX_DHE_RSA, GNUTLS_KX_SRP, 0 };
 
Index: tigervnc-1.4.1/common/rfb/SSecurityTLS.cxx
===================================================================
--- tigervnc-1.4.1.orig/common/rfb/SSecurityTLS.cxx
+++ tigervnc-1.4.1/common/rfb/SSecurityTLS.cxx
@@ -166,7 +166,7 @@ bool SSecurityTLS::processMsg(SConnectio
 
 void SSecurityTLS::setParams(gnutls_session session)
 {
-  static const int kx_anon_priority[] = { GNUTLS_KX_ANON_DH, 0 };
+  static const int kx_anon_priority[] = { GNUTLS_KX_ANON_ECDH, GNUTLS_KX_ANON_DH, 0 };
   static const int kx_priority[] = { GNUTLS_KX_DHE_DSS, GNUTLS_KX_RSA,
 				     GNUTLS_KX_DHE_RSA, GNUTLS_KX_SRP, 0 };
 
openSUSE Build Service is sponsored by