OpenSSL < 1.0.2 unsupported; HTTPS websites

--===============0493130878==
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="h31gzZEtNLTqOjlF"
Content-Disposition: inline


--h31gzZEtNLTqOjlF
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Two pieces of TLS-related news: OpenSSL support status; and Exim
websites and HTTPS.

First, a reminder: as of 2017 (Happy New Year!) no version of OpenSSL
in a series less than 1.0.2 is supported by the OpenSSL project:

  https://www.openssl.org/policies/releasestrat.html

OpenSSL release series 0.9.8, 1.0.0 and 1.0.1 are all now unsupported.
OpenSSL 1.0.2 is an LTS release.

The Exim Maintainers are not going to rush out to break support for
older series, but we're also not going to be constrained to keep working
with systems which are unsupported.

For you this means: if you're using OS packages, keep using the OS
packages.  An OS which locks OpenSSL to an old version and backports
fixes is also already doing that for Exim.  They're unlikely to change
this practice.  If you're building Exim from source, then you should be
prepared to also keep your OpenSSL up-to-date too.  We'll add something
to the Exim install steps to walk you through the very simple steps.


Second, for those who track certificate authorities with paranoia: the
Exim HTTPS-enabled websites are all now using certificates from Let's
Encrypt.  A couple more websites (git.exim.org and ftp.exim.org) are
also now additionally available over HTTPS.

Exim releases can thus be found at:

  https://ftp.exim.org/pub/exim/exim4/

although PGP signatures of releases should still be verified, as always.
Existing download URLs are unchanged, this is an addition, not a
replacement.

Our thanks to https://letsencrypt.org/ for an excellent free service,
helping to move the web towards HTTPS everywhere.


Regards,
-Phil Pennock, pp The Exim Maintainers

--h31gzZEtNLTqOjlF
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEExpOgNOHtbulUyuLaE9rZnH5BUZwFAlhqcxkACgkQE9rZnH5B
UZweSg/+IDk21nCl4zpEI9fAm71h/ac6eec02Amq3eOPVgMJVCfXPBwi1Pum5pAt
Zn/kWx/DpDTMTG48niHQHPSVWI6cH806YRipmxDjk/c+a90DgzEJqWJrKswmtJy2
M3Vm8xb/oOSHYSGZam60n3uIRUW9bNcaG3lT0mW+OjfpJ08qCKrV2FrPAykYKSaE
CW3TQ3RUzh8015rH1mDdGYMS9Rcq72RbXZPzdKsH3fwic8GVOQPfkGXt6A86V450
AEEIWl3RAaTnJpltp8iczJGxXZSKCT+ZXUjwOcWSUK+XwnA32safxuo+jJuiiVb4
tlXWbweE581w51DhXcH1nKDhK2rIMz+cjRautm3jVfNzucIsPyuuMZFWOHIKolR8
lErfom0pe9fNhsiZRNay4QQiklOzI8cKeifmeXG9iOgXR+RJXs1f5BXc4IIP1xGo
eUlzWg+d4TttAm6m+aVzZDsNiObvMiQLzGAVAy6aP7nFg3mNnyOwkclFZLQAQlaY
FVlpIXtPzzPxs76Z0mFpoEBAyrw3f5yOzvghiAH+zNMZudlV3n1XBKTm+zVsQ5ds
ZWcVhqLVt5aCnoR0sTyilGm27wtMTVdinSdxqqQRY1n1HROO+T9IEGfD+PIkWdxt
QpIZT2qAqrorS4WyvFRQYswu8m9IkxdfEq6w/dklJ1pAwILs7kc=
=aYYI
-----END PGP SIGNATURE-----

--h31gzZEtNLTqOjlF--


--===============0493130878==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCiMjIExpc3QgZGV0YWlscyBhdCBodHRwczovL2xpc3RzLmV4aW0ub3JnL21haWxtYW4vbGlz
dGluZm8vZXhpbS1hbm5vdW5jZSBFeGltIGRldGFpbHMgYXQgaHR0cDovL3d3dy5leGltLm9yZy8g
IyMK

--===============0493130878==--