[exim-dev] [Bug 2822] DHE ciphers missing, under GnuTLS

https://bugs.exim.org/show_bug.cgi?id=2822

Jeremy Harris <jgh146exb@???> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|Exigrep                     |TLS
            Summary|Issues with DHE ciphers -   |DHE ciphers missing, under
                   |problems with GnuTLS        |GnuTLS
                   |implementation?             |
             Status|NEW                         |ASSIGNED
            Version|4.94                        |4.93
           Hardware|x86                         |All
   Target Milestone|Indeterminate               |Exim 4.96

--- Comment #3 from Jeremy Harris <jgh146exb@???> ---
Bisection traces to 49132a3bb5 - where we stopped calling
gnutls_certificate_set_dh_params(). This will affect 4.93 onward, for versions
of GnuTLS 3.6.0 and later.

GnuTLS docs (https://www.gnutls.org/manual/html_node/Parameter-generation.html)
say "it's obsolete, no longer needed, do not call". We are trying to get
clarification from the GnuTLS project.

--
You are receiving this mail because:
You are on the CC list for the bug.