Re: [exim-dev] GnuTLS and tls_eccurve

Top Page
Delete this message
Reply to this message
Author: Andreas Metzler
Date:  
To: exim-dev
Subject: Re: [exim-dev] GnuTLS and tls_eccurve
[moved from -users to -dev]
On 2017-03-22 Bjcsurf via Exim-users <exim-users@???> wrote:
> Thanks. Then I guess all of the details will be specified in the
> tls_require_ciphers option.


> I do notice in the documentation [1] that only OpenSSL is discussed in
> the tls_eccurve option, but it might be nice if it specifically
> mentioned that GnuTLS does not use this option.


How about the attached patch?

cu Andreas
--
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'
diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt
index a342a171..5341c4ef 100644
--- a/doc/doc-docbook/spec.xfpt
+++ b/doc/doc-docbook/spec.xfpt
@@ -17179,6 +17179,8 @@ For OpenSSL versions before (and not including) 1.0.2, the string

If the option expands to an empty string, no EC curves will be enabled.

+This setting is only relevant for OpenSSL, it not used when Exim is built
+against GnuTLS.

.option tls_ocsp_file main string&!! unset
.cindex TLS "certificate status"