[exim-dev] [Bug 665] GnuTLS: Please allow disabling of MAC P…

Top Page
Delete this message
Reply to this message
Author: Phil Pennock
Date:  
To: exim-dev
Old-Topics: [exim-dev] [Bug 665] New: GnuTLS: Please allow disabling of MAC Padding
Subject: [exim-dev] [Bug 665] GnuTLS: Please allow disabling of MAC Padding
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=665




--- Comment #3 from Phil Pennock <exim-dev@???> 2008-08-14 06:57:32 ---
Created an attachment (id=263)
--> (http://bugs.exim.org/attachment.cgi?id=263)
gnutls_compat_mode

With some checking, it appears that while GnuTLS has
gnutls_record_disable_padding() it also has
gnutls_session_enable_compatibility_mode() which is currently documented as
equivalent, but more generic and perhaps more appropriate for a policy (but
even better would be an interface offering a string list of tags for compat
features).

The patch adds "gnutls_compat_mode"; I have tested that Exim compiles and runs
with this but don't have a way to test the impact.

Note that I haven't written documentation for this, I've had enough of docbook
for one day. (Five minutes, far too much).

The code patch for bug 674 makes changes nearby but I've confirmed that patch
and this patch can be applied together without conflict (just some minor line
fudging).


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email