From 6600985a2331eeaa8af525eb627edfe08b1a2e9c Mon Sep 17 00:00:00 2001 From: Phil Pennock Date: Sat, 20 May 2017 23:17:21 -0400 Subject: Use DH_bits for OpenSSL 1.1.0 Fixes bug 2095 --- doc/doc-txt/ChangeLog | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'doc/doc-txt') diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index 6ba9a3e5e..05dc007de 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -92,6 +92,12 @@ JH/13 Do pipelining under TLS. Previously, although safe, no advantage was a single packet). As a side issue, smtp_enforce_sync now works on TLS connections. +PP/05 OpenSSL/1.1: use DH_bits() for more accurate DH param sizes. This + affects you only if you're dancing at the edge of the param size limits. + If you are, and this message makes sense to you, then: raise the + configured limit or use OpenSSL 1.1. Nothing we can do for older + versions. + Exim version 4.89 ----------------- -- cgit v1.2.3