[exim-dev] [Bug 1895] Default groups for DH possibly backdoo…

Top Page
Delete this message
Reply to this message
Author: admin
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 1895] Default groups for DH possibly backdoored
https://bugs.exim.org/show_bug.cgi?id=1895

Andreas Metzler <eximusers@???> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |eximusers@???


--- Comment #4 from Andreas Metzler <eximusers@???> ---
BTW I think the documentation on tls_dhparam is not completely correct for
GnuTLS:
----------------
If Exim is using OpenSSL and this option is empty or unset, then Exim will load
a default DH prime; the default is the 2048 bit prime described in section 2.2
of RFC 5114, "2048-bit MODP Group with 224-bit Prime Order Subgroup", which in
IKE is assigned number 23.
----------------
Afaict this is not OpenSSL-specific but also applies to GnuTLS.

--
You are receiving this mail because:
You are on the CC list for the bug.