Re: which openssl options are used by exim for a tls connection

Cyborg via Exim-users <[email protected]>
Newsgroups gmane.mail.exim.user
Message-ID <[email protected]> 
Am 06.06.25 um 15:22 schrieb Viktor Dukhovni via Exim-users:
> You have to more specific, Fedora's `s_client` is*more* restrictive
> than OpenSSL upstream without the crypto-policy patches.
but the used s_client  is the Fedora s_client which was LESS restrictive....

I think this should be best discussed with Fedora's openssl maint or 
openssl devs, because it's a bit unlogical to not use "DEFAULT" for the 
default settings :)

Cu,
Cyborg


-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
OpenPGP_0x048770A738345DD3.asc (application/pgp-keys, 920 B) 
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=LhE8
-----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature.asc (application/pgp-signature, 236 B) 
-----BEGIN PGP SIGNATURE-----

wnsEABYIACMWIQRjwwZDcb5ODhI6BhkEh3CnODRd0wUCaEMFgQUDAAAAAAAKCRAEh3CnODRd0w2K
APkBCuG15Im/4sJBCgChvmLbU+TW993noKZTOqiTRy9HgwD8CRFyEuc+6OEQt/WVEC8qUiIGRNb/
5gjcecmDSOjTDgY=
=5fYs
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.