diff options
| author | Phil Pennock <pdp@exim.org> | 2013-06-16 21:32:11 -0400 |
|---|---|---|
| committer | Phil Pennock <pdp@exim.org> | 2013-06-16 21:32:11 -0400 |
| commit | e2fbf4a211bdcff441c50f58f3c1f1fb17f56d61 (patch) | |
| tree | 75ecc5d38c29ec301f1c32282f87b3800337c9b3 /doc | |
| parent | d13cdd3049b0191bbb275f9a6cf11dc0917a1f0c (diff) | |
Support safari_ecdhe_ecdsa_bug for openssl_options
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/doc-docbook/spec.xfpt | 11 | ||||
| -rw-r--r-- | doc/doc-txt/ChangeLog | 4 |
2 files changed, 15 insertions, 0 deletions
diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt index 56ce0693b..29214e3e1 100644 --- a/doc/doc-docbook/spec.xfpt +++ b/doc/doc-docbook/spec.xfpt @@ -14742,6 +14742,8 @@ Possible options may include: .next &`no_tlsv1_2`& .next +&`safari_ecdhe_ecdsa_bug`& +.next &`single_dh_use`& .next &`single_ecdh_use`& @@ -14757,6 +14759,15 @@ Possible options may include: &`tls_rollback_bug`& .endlist +.new +As an aside, the &`safari_ecdhe_ecdsa_bug`& item is a misnomer and affects +all clients connecting using the MacOS SecureTransport TLS facility prior +to MacOS 10.8.4, including email clients. If you see old MacOS clients failing +to negotiate TLS then this option value might help, provided that your OpenSSL +release is new enough to contain this work-around. This may be a situation +where you have to upgrade OpenSSL to get buggy clients working. +.wen + .option oracle_servers main "string list" unset .cindex "Oracle" "server list" diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index d84e2aa5d..f9a376779 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -205,6 +205,10 @@ PP/21 Fix eximon continuous updating with timestamped log-files. PP/22 Guard LDAP TLS usage against Solaris LDAP variant. Report from Prashanth Katuri. +PP/23 Support safari_ecdhe_ecdsa_bug for openssl_options. + It's SecureTransport, so affects any MacOS clients which use the + system-integrated TLS libraries, including email clients. + Exim version 4.80.1 ------------------- |