Re: [exim] 4.95 RC0 - gnutls outgoing TLS cert verification …

Top Pagina
Delete this message
Reply to this message
Auteur: Andreas Metzler
Datum:  
Aan: exim-users
CC: Andreas Metzler
Onderwerp: Re: [exim] 4.95 RC0 - gnutls outgoing TLS cert verification broken
On 2021-07-19 Andreas Metzler <eximusers@???> wrote:
[...]
> with 4.92.2
> tls_verify_certificates = system
> and 4.95 rc0
> tls_verify_certificates =


Hello,

SUPPORT_SYSDEFAULT_CABUNDLE is #defined in src/tls-gnu.c
#if GNUTLS_VERSION_NUMBER >= 0x030014
# define SUPPORT_SYSDEFAULT_CABUNDLE
#endif
but checked for in (in vain) in src/transports/smtp.c and src/globals.c.

I would suggest simply dropping support for this ancient gnutls, 3.0.20
was released 2012-06-05.

cu Andreas
--
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'