Re: [exim] DANE(TA) doesn't work with self signed certificat…

Top Page
Delete this message
Reply to this message
Author: Viktor Dukhovni
Date:  
To: exim-users
Subject: Re: [exim] DANE(TA) doesn't work with self signed certificate


> On Sep 7, 2018, at 1:19 PM, Jan Ingvoldstad via Exim-users <exim-users@???> wrote:
>
> Additionally, Debian is, in the longer term, in a position to use a
> different TLS library than GnuTLS.


Debian has historically been ultra-conservative on the potential License
compatibility issues between GPL (Exim) and the OpenSSL license:

https://people.gnome.org/~markmc/openssl-and-the-gpl.html

IMHO, Debian's caution is excessive. They're make OpenSSL available
with the OS, as a debian package. OpenSSL is not bundled with Exim,
(though Exim might on some systems just happen to be first package
installed that has OpenSSL as a dependency) nor is the OpenSSL used
by Exim a dedicated build that accompanies Exim and not other Debian
programs that use OpenSSL.

My opinion is of course unlikely to sway Debian one way or other, IANAL.

-- 
    Viktor.