Just blacklist anonymous DH.

git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12670 a1ca3aef-8c08-0410-bb20-df032aa958be

diff --git a/cups/tls-gnutls.c b/cups/tls-gnutls.c
index b4271987cb29cc235de5b8790ad80cbe60ee6382..e29dd3186085f6835a377ae3d9c268c490961044 100644 (file)
--- a/cups/tls-gnutls.c
+++ b/cups/tls-gnutls.c
@@ -1221,7 +1221,7 @@ _httpTLSStart(http_t *http)               /* I - Connection to server */
     strlcat(priority_string, ":-ARCFOUR-128", sizeof(priority_string));
 
   if (!(tls_options & _HTTP_TLS_ALLOW_DH))
-    strlcat(priority_string, ":!DHE-RSA:!DHE-DSS:!ANON-DH", sizeof(priority_string));
+    strlcat(priority_string, ":!ANON-DH", sizeof(priority_string));
 
 #ifdef HAVE_GNUTLS_PRIORITY_SET_DIRECT
   gnutls_priority_set_direct(http->tls, priority_string, NULL);