diff -up webkitgtk-2.17.5/Source/WebKit/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp.fedora-crypto-policy webkitgtk-2.17.5/Source/WebKit/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp
--- webkitgtk-2.17.5/Source/WebKit/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp.fedora-crypto-policy	2017-07-26 10:41:35.729680485 +0200
+++ webkitgtk-2.17.5/Source/WebKit/NetworkProcess/EntryPoint/unix/NetworkProcessMain.cpp	2017-07-26 10:41:47.709611761 +0200
@@ -39,7 +39,7 @@ int main(int argc, char** argv)
     // overwrite this priority string if it's already set by the user.
     // https://bugzilla.gnome.org/show_bug.cgi?id=738633
     // WARNING: This needs to be KEPT IN SYNC with WebProcessMain.cpp.
-    setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:!VERS-SSL3.0:!ARCFOUR-128", 0);
+    setenv("G_TLS_GNUTLS_PRIORITY", "@SYSTEM:%COMPAT:!VERS-SSL3.0:!ARCFOUR-128", 0);
 
     return NetworkProcessMainUnix(argc, argv);
 }
diff -up webkitgtk-2.17.5/Source/WebKit/WebProcess/EntryPoint/unix/WebProcessMain.cpp.fedora-crypto-policy webkitgtk-2.17.5/Source/WebKit/WebProcess/EntryPoint/unix/WebProcessMain.cpp
--- webkitgtk-2.17.5/Source/WebKit/WebProcess/EntryPoint/unix/WebProcessMain.cpp.fedora-crypto-policy	2017-07-26 10:38:08.202870988 +0200
+++ webkitgtk-2.17.5/Source/WebKit/WebProcess/EntryPoint/unix/WebProcessMain.cpp	2017-07-26 10:38:35.342715297 +0200
@@ -43,7 +43,7 @@ int main(int argc, char** argv)
     // overwrite this priority string if it's already set by the user.
     // https://bugzilla.gnome.org/show_bug.cgi?id=738633
     // WARNING: This needs to be KEPT IN SYNC with WebProcessMain.cpp.
-    setenv("G_TLS_GNUTLS_PRIORITY", "NORMAL:%COMPAT:!VERS-SSL3.0:!ARCFOUR-128", 0);
+    setenv("G_TLS_GNUTLS_PRIORITY", "@SYSTEM:%COMPAT:!VERS-SSL3.0:!ARCFOUR-128", 0);
 
 #if USE(GCRYPT)
     // Call gcry_check_version() before any other libgcrypt call, ignoring the