Package: sendmail
Version: 8.14.4-4
Severity: minor
Sendmail on Wheezy sometimes has interoperability problems with other
SSL implementations. Some of these can be fixed by disabling TLS 1.1
and TLS 1.2. Sendmail 8.14.8 supports SSL options to do this, but
Sendmail 8.14.4-4 does not. Could we backport this patch from 8.14.8 to
8.14.4-4 so that we can use SSL_OP_NO_TLSv1_2 and SSL_OP_NO_TLSv1_1 ?
Regards,
David.
--- sendmail-8.14.7/sendmail/readcf.c 2013-03-15 18:54:12.000000000 +0100
+++ sendmail-8.14.8/sendmail/readcf.c 2013-11-22 21:51:56.000000000 +0100
@@ -2373,6 +2385,12 @@ static struct ssl_options
#ifdef SSL_OP_NO_TLSv1
{ "SSL_OP_NO_TLSv1", SSL_OP_NO_TLSv1 },
#endif
+#ifdef SSL_OP_NO_TLSv1_2
+ { "SSL_OP_NO_TLSv1_2", SSL_OP_NO_TLSv1_2 },
+#endif
+#ifdef SSL_OP_NO_TLSv1_1
+ { "SSL_OP_NO_TLSv1_1", SSL_OP_NO_TLSv1_1 },
+#endif
#ifdef SSL_OP_PKCS1_CHECK_1
{ "SSL_OP_PKCS1_CHECK_1", SSL_OP_PKCS1_CHECK_1 },
#endif
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
