Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2021-11-11 Thread Yves-Alexis Perez
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, 26 Nov 2020 20:55:15 +0800 Paul Wise wrote: > On Thu, 2020-11-26 at 21:57 +1300, Andrew Bartlett wrote: > > > No, this is just a reflection of what mode GnuTLS is set to on your > > system. > > Hmm, I haven't customised the GnuTLS config,

Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2020-11-26 Thread Paul Wise
Control: forwarded -1 https://bugzilla.samba.org/show_bug.cgi?id=14583 On Fri, 2020-11-27 at 14:34 +1300, Andrew Bartlett wrote: > You need to raise it with your concerns. Done in the above bug report. -- bye, pabs https://wiki.debian.org/PaulWise signature.asc Description: This is a digita

Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2020-11-26 Thread Andrew Bartlett
On Fri, 2020-11-27 at 07:59 +0800, Paul Wise wrote: > On Fri, 2020-11-27 at 06:45 +1300, Andrew Bartlett wrote: > > > What should come of this bug is that the testparm output and > > associated > > documentation needs to be much more verbose as to what this means, > > and > > what the alternative

Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2020-11-26 Thread Paul Wise
On Fri, 2020-11-27 at 06:45 +1300, Andrew Bartlett wrote: > What should come of this bug is that the testparm output and associated > documentation needs to be much more verbose as to what this means, and > what the alternative would mean for a interoperable installation. > > (And that needs to

Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2020-11-26 Thread Andrew Bartlett
On Thu, 2020-11-26 at 20:55 +0800, Paul Wise wrote: > On Thu, 2020-11-26 at 21:57 +1300, Andrew Bartlett wrote: > > > No, this is just a reflection of what mode GnuTLS is set to on your > > system. > > Hmm, I haven't customised the GnuTLS config, so does that mean that > Debian GnuTLS still allow

Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2020-11-26 Thread Paul Wise
On Thu, 2020-11-26 at 21:57 +1300, Andrew Bartlett wrote: > No, this is just a reflection of what mode GnuTLS is set to on your > system. Hmm, I haven't customised the GnuTLS config, so does that mean that Debian GnuTLS still allows some weak crypto? Should this be reassigned? -- bye, pabs htt

Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2020-11-26 Thread Andrew Bartlett
On Thu, 2020-11-26 at 16:41 +0800, Paul Wise wrote: > Package: samba-common-bin > Version: 2:4.13.2+dfsg-3 > Severity: normal > Usertags: warnings > > When installing samba-common-bin, testparm complains about smb.conf > that "Weak crypto is allowed". I don't see anything about crypto in the > def

Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2020-11-26 Thread Paul Wise
Package: samba-common-bin Version: 2:4.13.2+dfsg-3 Severity: normal Usertags: warnings When installing samba-common-bin, testparm complains about smb.conf that "Weak crypto is allowed". I don't see anything about crypto in the default configuration file, so I'm guessing the samba build config is w