Re: [PATCH 0/2] gnutls: Be more clever about DH key size

[Ján Tomko]

On a Wednesday in 2021, Martin Kletzander wrote:

On Tue, Dec 21, 2021 at 03:22:57PM +0100, Michal Privoznik wrote:

See 2/2 for explanation.

Ideally, we wouldn't use gnutls_dh_params_generate2() at all, per [1].
But that would require bumping minimal required version to gnutls-3.6.0
and I'm not sure how available it is in OSes we support. Therefore, for

As far as I can tell from repology.org all the major distros have 3.6.x
in more than one version and definitely all those that we have in the
CI, so I'd say bump that.

There's Ubuntu 18.04 with 3.5.18.

But we could #ifndef the old code out and use the pre-generated
parameters on every other distro, as recommended.

Jano

signature.asc
Description: PGP signature