summaryrefslogtreecommitdiff
path: root/doc/doc-txt/GnuTLS-FAQ.txt
AgeCommit message (Collapse)Author
2013-09-01GnuTLS website movesPhil Pennock
2012-12-20GnuTLS-FAQ: typo fixes & glitch re standard primesPhil Pennock
Mostly typos. Was one instance of "which a future release of Exim will probably support" which should already have been "which Exim now supports". Doh. Fixed too.
2012-05-30Revert "Lower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512."exim-4_80Phil Pennock
This reverts commit 83f4c7515f3eb06dc070e78edd2694c1d088e5fd. This was not a new check! The call to gnutls_dh_set_prime_bits() was made with DH_BITS in Exim 4.77, so the only difference is that now an administrator can choose at compile time to change the lower bound. So keeping this at 1024 is not a regression and if we can't talk to them now, we couldn't before, and we shouldn't lower security by default. The reverted commit was only acceptable IF it was still better than what we had in Exim 4.77.
2012-05-30Lower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512.Phil Pennock
Wolfgang Breyha saw a real-world site using 768 bits.
2012-05-27For DH, use standard primes from RFCsPhil Pennock
2012-05-27Deal with GnuTLS DH generation overshootPhil Pennock
2012-05-26FAQ for GnuTLSPhil Pennock