On Wed, 16 May 2012, Phil Pennock wrote:
So, the current stable release of GnuTLS is 3.0.x; they only distribute
with .xz or .lz compression extensions, which might explain why the OS
packagers seem to still be on GnuTLS 2.
The current 2 branch is GnuTLS 2.12.x.
The old 2 branch is GnuTLS 2.10.x.
GnuTLS 2.8.x is ancient.
... ...
So we have a choice: continue to support ancient GnuTLS and get warnings
and later errors on more current GnuTLS, or accept a new requirement of
a "not too old" GnuTLS for the current Exim releases, if using GnuTLS.
I've been going on the assumption that the only folks really on ancient
GnuTLS are distros like Debian, who also maintain ancient Exim with
patches, so they are not affected by this change until they also update
Exim, when they can just update GnuTLS too.
Hmm. I suppose that Red Hat *is* like Debian.
RHEL 5.8 has gnutls-1.4.1 and RHEL 6.2 has gnutls-2.8.5.
I know sysadmins who still consider RHEL 6.2 a bit experimental
for production servers.
--
Dr. Andrew C. Aitchison Computer Officer, DPMMS, Cambridge
[email protected] http://www.dpmms.cam.ac.uk/~werdna
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim
details at http://www.exim.org/ ##
