Troubles with SSL ciphers

Klaus Ethgen via Exim-users <[email protected]> Sun, 5 Jul 2026 12:02:25 +0100
Newsgroups gmane.mail.exim.user
Message-ID <ako5wTY2t7N_A8N4@chil>
--===============2466207065128414014==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="OpALCKBI2I2L7uC1"
Content-Disposition: inline


--OpALCKBI2I2L7uC1
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

another trouble I had when updating was with the ciphers.

=46rom https://configurator.tlsref.org/ I get the following[0]:
openssl_options =3D +no_sslv2 +no_sslv3 +no_tlsv1 +no_tlsv1_1
tls_eccurve =3D X25519MLKEM768:X25519:prime256v1:secp384r1
tls_require_ciphers =3D ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-=
SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDS=
A-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305

unfortunately, the tls_eccurve option is not working and produces errors
due to X25519MLKEM768.

On much lower version on devuan os that settings was working. But I
think, devuan uses gnutls instead of openssl. On gentoo, gnutls is
incompatible with dane so that is not an option.

Any idea what happened to that option?

Regards
   Klaus

[0] https://configurator.tlsref.org/#server=3Dexim&version=3D4.99.4&config=
=3Dintermediate&openssl=3D3.5.7&guideline=3D6.0
--=20
Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <[email protected]>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C

--OpALCKBI2I2L7uC1
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
Comment: Charset: ISO-8859-1
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=PTA/
-----END PGP SIGNATURE-----

--OpALCKBI2I2L7uC1--

--===============2466207065128414014==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at https://www.exim.org/
## Please use the Wiki with this list - https://code.exim.org/exim/wiki/wiki

--===============2466207065128414014==--