Re: [exim/exim] [Bug]: GNUTLS certificate validation incompatible with certificates lacking a commonName attribute (Issue #3215)
"Adam D. Barratt via Exim-dev" <[email protected]> Tue, 14 Apr 2026 17:41:58 +0100
| Newsgroups | gmane.mail.exim.devel |
|---|---|
| Message-ID | <a3a64aa43388f2c390f0425a5bb9cb3ee6417502.camel@adam-barratt.org.uk> |
On Tue, 2026-04-14 at 20:22 +1000, Viktor Dukhovni via Exim-dev wrote: > On Mon, Apr 13, 2026 at 07:43:22PM +0100, adsbarratt via Exim-dev > wrote: > > > Seen using Exim 4.96-15+deb12u7 on Debian 12, but the relevant code > > does not appear to have changed in the meantime > > Is the Exim build in quetion definitely linked with GnuTLS and not > OpenSSL? If you want to have working DANE support in Exim, you > should IMNSHO avoid the GnuTLS backend. Yes, Debian's packaged Exim builds are all linked against GnuTLS. I'd rather not have to maintain a separate build and have Debian's infrastructure run something that's different from what we release to users. Regards, Adam -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-dev.lists.exim.org/ ## unsubscribe (doesn't require an account): ## [email protected] ## Exim details at https://www.exim.org/ ## Please use the Wiki with this list - https://code.exim.org/exim/wiki/wiki