https://bugs.exim.org/show_bug.cgi?id=2822
--- Comment #12 from Ferry ---
Hi,
seems GnuTLS will make some changes in an upcoming release.
https://gitlab.com/gnutls/gnutls/-/issues/1077#note_756103636
Not sure what that should mean for Exim however. The code might need to
consider what GnuTLS
https://bugs.exim.org/show_bug.cgi?id=2822
Jeremy Harris changed:
What|Removed |Added
Resolution|--- |FIXED
Status|WAIT_FIX_CONFIRMATION
https://bugs.exim.org/show_bug.cgi?id=2822
--- Comment #10 from Simon Arlott ---
(In reply to Jeremy Harris from comment #5)
> (In reply to Ferry from comment #4)
> > According to the responses there either:
> > gnutls_certificate_set_dh_params or gnutls_certificate_set_known_dh_params
> >
https://bugs.exim.org/show_bug.cgi?id=2822
Jeremy Harris changed:
What|Removed |Added
Status|ASSIGNED|WAIT_FIX_CONFIRMATION
--- Comment #9 from
https://bugs.exim.org/show_bug.cgi?id=2822
Git Commit changed:
What|Removed |Added
CC||g...@exim.org
--- Comment #8 from Git Commit ---
https://bugs.exim.org/show_bug.cgi?id=2822
--- Comment #7 from Jeremy Harris ---
Raised the issue on gnutls-h...@lists.gnutls.org
If we're lucky they'll take action one way or the other.
If they stay silent, we will need to assume that the docs are incorrect rather
than the library, and revert
https://bugs.exim.org/show_bug.cgi?id=2822
--- Comment #6 from Ferry ---
Until they fix it, it might be wise to set the dhparams, load the referenced
ones from RFC7919 or not ignoring tls_dhparam.
Without it, it's broken.
--
You are receiving this mail because:
You are on the CC list for the
https://bugs.exim.org/show_bug.cgi?id=2822
Jeremy Harris changed:
What|Removed |Added
See Also||http://bugs.debian.org/9681
|
https://bugs.exim.org/show_bug.cgi?id=2822
--- Comment #4 from Ferry ---
Hi,
GnuTLS matrix channel referred to:
https://gitlab.com/gnutls/gnutls/-/issues/1077
According to the responses there either:
gnutls_certificate_set_dh_params or gnutls_certificate_set_known_dh_params
should be called.
https://bugs.exim.org/show_bug.cgi?id=2822
Jeremy Harris changed:
What|Removed |Added
Component|Exigrep |TLS
Summary|Issues with DHE ciphers
10 matches
Mail list logo