[exim-dev] [Bug 1095] Uses (soon to be) deprecated GnuTLS fu…

Top Page
Delete this message
Reply to this message
Author: Christof Meerwald
Date:  
To: exim-dev
Old-Topics: [exim-dev] [Bug 1095] New: Uses (soon to be) deprecated GnuTLS functions
Subject: [exim-dev] [Bug 1095] Uses (soon to be) deprecated GnuTLS functions
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=1095




--- Comment #4 from Christof Meerwald <cmeerw@???> 2011-10-22 14:09:46 ---
Created an attachment (id=509)
--> (http://bugs.exim.org/attachment.cgi?id=509)
Update exim gnutls support

This patch replaces tls_require_ciphers, gnutls_require_kx, gnutls_require_mac
and gnutls_require_protocols with gnutls_priority (which is passed directly to
gnutls_priority_set_direct).

The name of the gnutls-params file is now configurable via tls_dhparam (similar
to OpenSSL).

Added an option gnutls_require_dh_bits (to avoid passing a hardcoded value to
gnutls_dh_set_prime_bits).

Uses gnutls_sec_param_to_pk_bits (for GnuTLS >= 2.12) to get the number of bits
to pass to gnutls_dh_params_generate2 (instead of a hardcoded value).

I don't expect this patch to be the final version, but rather as a basis for
further discussions.


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email