Re: [exim] Force TLSv1.2 on EXIM server (4.80.1)

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Randy Bush
Datum:  
To: Viktor Dukhovni
CC: exim-users
Betreff: Re: [exim] Force TLSv1.2 on EXIM server (4.80.1)
# uname -a
Linux ran.psg.com 3.13.0-61-generic #100-Ubuntu SMP Wed Jul 29 11:22:15 UTC 2015 i686 athlon i686 GNU/Linux

fully updated, but which seems to have an old exim

# exim --version
Exim version 4.82 #3 built 25-Feb-2014 16:38:04

>     HIGH:MEDIUM:@STRENGTH:+RC4:!MD5:!SRP:!PSK:!aDSS:!kECDH:!kDH:!SEED:!IDEA:!RC2:!RC5


#openssl_options = +no_sslv2 +no_sslv3    # seems to use gnutls
tls_require_ciphers = HIGH:MEDIUM:@STRENGTH:+RC4:!MD5:!SRP:!PSK:!aDSS:!kECDH:!kDH:!SEED:!IDEA:!RC2:!RC5                                                        


2015-08-01 01:54:26 Exim configuration error:
tls_require_ciphers invalid: gnutls_priority_init(HIGH:MEDIUM:@STRENGTH:+RC4:!MD5:!SRP:!PSK:!aDSS:!kECDH:!kDH:!SEED:!IDEA:!RC2:!RC5) failed at offset 0, "HIGH:MED.." failed: The request is invalid.

randy