Bug#1011249:

2022-05-19 Thread Andreas Hasenack
I created this PR: https://salsa.debian.org/debian/cyrus-sasl2/-/merge_requests/11

Bug#1011249: cyrus-sasl2: broken DIGEST-MD5 with openssl3

2022-05-19 Thread Andreas Hasenack
Hi, On Wed, May 18, 2022 at 6:34 PM Bastian Germann wrote: > Should I take the upstream sasl patches which enable DIGEST-MD5 again or is s/enable/fix/ :) > it time to drop that mechanism, which is obsoleted by RFC6331 for 11 years? It looks like upstream wants to obsolete DIGEST-MD5 and defau

Bug#1011249: cyrus-sasl2: broken DIGEST-MD5 with openssl3

2022-05-18 Thread Bastian Germann
X-Debbugs-Cc: debian-de...@lists.debian.org Am 18.05.22 um 22:00 schrieb Andreas Hasenack: cyrus-sasl2 2.1.28 has commit ... which makes it use openssl for RC4. debian/sid now has openssl3, which deprecated RC4 and made it part of the legacy provider. Which means that by default it won't be av

Bug#1011249: cyrus-sasl2: broken DIGEST-MD5 with openssl3

2022-05-18 Thread Andreas Hasenack
Package: cyrus-sasl2 Version: 2.1.28+dfsg-5 Severity: normal Dear maintainer, cyrus-sasl2 2.1.28 has commit 8aa9ae816ddf66921b4a8a0f422517e6f2e55ac6[1] which makes it use openssl for RC4. debian/sid now has openssl3, which deprecated RC4 and made it part of the legacy provider. Which means that