[exim-dev] [Bug 2311] New: DANE verify fails with a TA-mode …

Top Page
Delete this message
Reply to this message
Author: admin
Date:  
To: exim-dev
New-Topics: [exim-dev] [Bug 2311] DANE verify fails with a TA-mode TLSA and a selfsigned server cert, [exim-dev] [Bug 2311] DANE verify fails with a TA-mode TLSA and a selfsigned server cert, [exim-dev] [Bug 2311] DANE verify fails with a TA-mode TLSA and a selfsigned server cert, [exim-dev] [Bug 2311] DANE verify fails with a TA-mode TLSA and a selfsigned server cert, [exim-dev] [Bug 2311] DANE verify fails with a TA-mode TLSA and a selfsigned server cert, [exim-dev] [Bug 2311] DANE verify fails with a TA-mode TLSA and a selfsigned server cert, [exim-dev] [Bug 2311] DANE verify fails with a TA-mode TLSA and a selfsigned server cert
Subject: [exim-dev] [Bug 2311] New: DANE verify fails with a TA-mode TLSA and a selfsigned sever cert
https://bugs.exim.org/show_bug.cgi?id=2311

            Bug ID: 2311
           Summary: DANE verify fails with a TA-mode TLSA and a selfsigned
                    sever cert
           Product: Exim
           Version: 4.91
          Hardware: x86
                OS: Windows
            Status: NEW
          Severity: bug
          Priority: medium
         Component: Delivery in general
          Assignee: nigel@???
          Reporter: jgh146exb@???
                CC: exim-dev@???


This appears to be a GnuTLS library bug at present, but recording here for
tracking purposes.

Testsuite case 5822 exercises the issue.

Possible workarounds:
- EE-mode TLSA
- A full CA-anchored cert (eg. LetsEncrypt) rather than a selfsigned

--
You are receiving this mail because:
You are on the CC list for the bug.