As a step towards closure: the fix was committed to Exim on 2009-10-16
and was included in Exim 4.70. Current release is 4.72, 4.73 should be
soon.
The only changes for the patch committed upstream were:
* documentation
* a different diagnostic for versions of GnuTLS too old to support this
oenomel mesarch guides straiighter
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
An upstream patch (for a work around) is being tracked at
http://bugs.exim.org/show_bug.cgi?id=665
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
El lun, 04-02-2008 a las 14:12 +0100, Marc Haber escribió:
> On Mon, Feb 04, 2008 at 12:09:17PM +0100, Simon Josefsson wrote:
> I'd love to have some permanent reference that can be found by Symbian
> device owners and referenced in response to new bug reports.
>
> Greetings
> Marc
Here's a E60 a
Simon Josefsson <[EMAIL PROTECTED]> writes:
>>> Given this, I think gnutls has done what it can about this bug, and it
>>> might be appropriate to even close it, rather than leaving it in
>>> wontfix.
>>>
>>> Is there anything more we can do about this bug? Suggestions are most
>>> welcome.
>>
>
Marc Haber <[EMAIL PROTECTED]> writes:
>> I recommend that applications offer a way to set the GnuTLS priority
>> string in a configuration file, and to default it to 'NORMAL'. It is
>> extra good if the application allows users to set the GnuTLS priority on
>> a per-IP basis, so that administrat
On Mon, Feb 04, 2008 at 12:09:17PM +0100, Simon Josefsson wrote:
> I believe we have identified that the problem in this bug is the MAC
> padding. We brought this up on the IETF TLS list:
>
> http://thread.gmane.org/gmane.ietf.tls/3079
>
> Pasi forwarded this to the Symbian TLS team, and my unde
FYI, the upcoming GnuTLS 2.1.7 have a new API where applications can
provide a string to gnutls to set protocol priorities, and it can be
used to disable padding. An application could call:
gnutls_priority_set_direct (session, "NORMAL:%COMPAT", NULL, 0);
Instead of calling gnutls_set_default_pri
OpenSSL does not support random padding. They handle TLS 1.0 padding exactly
as SSL 3.0, thus this issue does not occur there. I believe that random padding
is important feature that avoids statistical attacks on the data, so
it's enabled by default
in gnutls.
On 11/5/07, Simon Josefsson <[EMAIL
Nikos wrote:
> Ok it seems that with the help of Hanno Wagner I managed to debug this issue.
> These clients fail to understand TLS 1.0 record packets with a padding added.
> This only occurs when using non stream ciphers (i.e. not arcfour) and does
> not occur when using SSL 3.0 which does not
This also occurs with exim4-daemon-heavy and my Nokia E70 with EPOC
mail.
Since the problem is in GNUTLS, it can be worked around by using
OpenSSL, which is fortunately simply a case of editing debian/rules
such that OPENSSL := 1.
UNfortunately, this isn't so staightforward with -heavy because
ap
On Tue, May 01, 2007 at 08:40:50PM +0200, Stian Jordet wrote:
> Didn't the gnutls people come to an conclusion on this one? Symbian
> phones are so common now, it's weird the gnutls people haven't run into
> this themselves :)
Unfortunately, there is still no solution besides disabling SHA-1 in
th
Hi,
Didn't the gnutls people come to an conclusion on this one? Symbian
phones are so common now, it's weird the gnutls people haven't run into
this themselves :)
Thanks.
Best regards,
Stian
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAI
On Tue, Dec 05, 2006 at 05:18:25PM +0100, Hanno 'Rince' Wagner wrote:
> I also have a Sony-Ericsson P990i (Germany, non-branded by a phone
> provider)
The P990i seems to have issues when connecting to a GnuTLS server. We
have verified this by having the phone connect to gnutls-serv. The
phone and
clone #390712 -1
reassign -1 libgnutls13
retitle -1 errors establishing TLS session from Nokia and SE mobile phones
submitter -1 [EMAIL PROTECTED]
block #390712 with -1
thanks
According to the discussion in
http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/2006-December/000349.html
and pre
Hi,
I have an issue with exim4 that can, IMO, clearly be traced to GnuTLS.
Please refer to #390712 for more information.
The original reporter, Stian Jordet <[EMAIL PROTECTED]>, has a
SonyEricsson P990, and Marc Fargas <[EMAIL PROTECTED]> reports
the same issue with a Nokia E60 (Software Version
Package: exim4-daemon-heavy
Version: 4.63-8
Followup-For: Bug #390712
Hi, same happens with Nokia E60 phone. All other SSL/TLS (imaps, https)
Services work
fine when accessed from the phone, only exim fails when trying to send messages.
-- Package-specific info:
Exim version 4.63 #1 built 23
tags #390712 help
user [EMAIL PROTECTED]
usertags #390712 gnutls
thanks
On Mon, Oct 02, 2006 at 07:39:09PM +0200, Stian Jordet wrote:
> Any insight?
unfortunately, no. We're still in dire need of help with GnuTLS.
Greetings
Marc
--
--
Package: exim4-daemon-heavy
Version: 4.63-4
Severity: normal
Another one of those beloved tls-bugs. I recently got myself a
SonyEricsson P990 smart phone. When trying to send mail with tls (the
same happens using ssl on port 465), the phone asks me to accept the
certificate, and then says "Secure
19 matches
Mail list logo