Re: A couple of questions and concerns about Emacs network security

[Jimmy Yuen Ho Wong]

On Mon, Jul 9, 2018 at 7:33 PM Eli Zaretskii <address@hidden> wrote:
>
> > From: Jimmy Yuen Ho Wong <address@hidden>
> > Date: Mon, 9 Jul 2018 19:10:09 +0100
> > Cc: Lars Ingebrigtsen <address@hidden>, Emacs-Devel devel <address@hidden>
> >
> > "Note that since 3.1.7 this function is deprecated. The minimum number
> > of bits is set by the priority string level. Also this function must
> > be called after gnutls_priority_set_direct() or the set value may be
> > overridden by the selected priority options."
>
> Granted, I saw that.  I have GnuTLS installed with its Info manual.
> But the above still doesn't tell what is the default number of bits,
> even if I go hunting for the description of the priority string.

I'm not sure of the significance of what you are trying to do, but if
you are trying to confirm the actual min prime bit, the file is here:

https://gitlab.com/gnutls/gnutls/blob/master/lib/algorithms/secparams.c

The second number is the DH min prime bits. Don't ask me which row is
the actual default... I don't want to know...