tls_require_ciphers must be assigned to state copy

2 files changed, 4 insertions, 0 deletions

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index 21f1ec747..3d0f5c255 100644
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -134,6 +134,9 @@ PP/31 %D in printf continues to cause issues (-Wformat=security), so for
       As part of this, removing so much warning spew let me fix some minor
       real issues in debug logging.
 
+PP/32 GnuTLS was always using default tls_require_ciphers, due to a missing
+      assignment on my part.  Fixed.
+
 
 Exim version 4.77
 -----------------
diff --git a/src/src/tls-gnu.c b/src/src/tls-gnu.c
index 51fdb8657..9d121f96f 100644
--- a/src/src/tls-gnu.c
+++ b/src/src/tls-gnu.c
@@ -870,6 +870,7 @@ state->host = host;
 
 state->tls_certificate = certificate;
 state->tls_privatekey = privatekey;
+state->tls_require_ciphers = require_ciphers;
 state->tls_sni = sni;
 state->tls_verify_certificates = cas;
 state->tls_crl = crl;