[mew-int 3181] Re: severe SSL issues

Werner LEMBERG <[email protected]> Thu, 09 Jan 2014 18:10:15 +0100 (CET)

Newsgroups	gmane.mail.mew.general
Message-ID	<[email protected]>

> I have gone through similar problems. The problem is related to FIPS, but
> I could not find a simple solution.
> So I went for a very simple solution :-)
>
> Install stunnel-4.53-1.1.x86_64 from security:Stunnel
> (and not any newer versions)

Hehe :-)

However, I finally found a solution.  After upgrading to the current
git version of Mew, I saw

  commit cf7168b2fd5f93466cc6a5323c0a720834c80904
  Author: Michael Ernst <[email protected]>
  Date:   Fri Aug 2 08:48:19 2013 -0700

    Fix mew-prog-ssl-arg with stunnel 4

    Currently, variable mew-prog-ssl-arg is ignored when using
    stunnel 4.  This makes it difficult to supply extra arguments to
    stunnel 4.  A reason to do so is to work around a stunnel
    installation that does not support FIPS.  This patch corrects the
    problem.  Ref. [mew-int 3158]

And indeed, adding the line

  (setq mew-prog-ssl-arg "fips=no\n")

to `.emacs' makes openSuSE's stunnel work.


    Werner