Hi Jeremy,
this Release in now working again with TLS and an EC384 Certificate.
Thanks a lot to Heiko who wrote this patch.
Sorry for my late reply, private issues kept me to busy.
Some more questions:
Is there a possibility to log the used curve like the way the used
cipher is logged?
Can it be possible to put a list of curves into
tls_eccurve instead of a single curve?
I tried to use: "X25519:brainpoolP384r1:brainpoolP512r1:secp521r1:secp384r1"
but than i have only an error in the log like:
2016-12-09 10:41:10 [13602] TLS error on connection from
www.tributh.net
[2a00:dca0:100:5:dead:face:beef:babe]:60576
I=[2a00:dca0:100:5:dead:face:beef:babe]:8465 (Unknown curve name
tls_eccurve
'X25519:brainpoolP384r1:brainpoolP512r1:secp521r1:secp384r1'):
error:00000000:lib(0):func(0):reason(0)
Thanks for the great work so far
Regards Torsten
On 12/07/2016 09:11 PM, Jeremy Harris wrote:
> I have built and uploaded to
>
> ftp://ftp.exim.org/pub/exim/exim4/test/
>
> the RC6 release candidate build of Exim 4.88
> Built and signed by myself.
>
> Sha256 sums:
>
> 720977d1ffb15294c5a2d782b427d4b36dab1a3637674e8d5bbaeda3c7664541
> exim-4.88_RC6.tar.gz
> 1eabafb252a6d0f99f9e34fe44ca2a082dbf9c60b187dfc58f6bcd1fbcbad5f8
> exim-html-4.88_RC6.tar.gz
> d92a61031dcdd082bacf1a6797cdaf7825edbf96e56b11d28628193bb5ada31e
> exim-pdf-4.88_RC6.tar.gz
> 6a2dd44cb83ebecc5253c731d7e8ef3fcf34f4403b47a632db678d0f035fb214
> exim-postscript-4.88_RC6.tar.gz
> 2281b38b586a3827fa2a3e147e936d4042d4392246da3a3f2c012600bdc7281e
> exim-4.88_RC6.tar.bz2
> a651e98773e1920d3954eba6f10dfc9a0efcda355281b9e16806447217444144
> exim-html-4.88_RC6.tar.bz2
> befda271a6ef3e4f09bef847ec0dce1d05a2d9809fc622a1f04384577ce7e5e6
> exim-pdf-4.88_RC6.tar.bz2
> d5d81456d05c270bcbd72a710e5aafe8ec9eeed6df70e1f82c7b7fc1fd7c94bf
> exim-postscript-4.88_RC6.tar.bz2
>
>
> There is one change of interest since RC5:
>
> - For builds with OpenSSL the tls_eccurve main option now defaults
> to 'auto'. For OpenSSL versions at or newer than 1.0.2 this lets
> the library choose. For older versions it selects 'prime256v1',
> which was the previous default.
>
>
> This build is intended to be the last RC before final release
> of Exim 4.88.
>
>
> Please report issues here in the exim-dev or
> exim-users mailinglist, or by raising bugs
> on http://bugs.exim/org
> -- ex
> Cheers,
> Jeremy
>
>
--
Torsten
