Bug#931256: Failure of DHE key exchanges with OpenSSL security level 2

2019-06-29 Thread Julien ÉLIE
I think that we are way too late for 10.0, but I will make a new package in ~1 month aiming for 10.1. That would be great. Thanks, Marco. -- Julien

Bug#931256: Failure of DHE key exchanges with OpenSSL security level 2

2019-06-29 Thread Marco d'Itri
On Jun 29, Julien ÉLIE wrote: > Here is a patch to improve how INN selects appropriate parameters: > https://inn.eyrie.org/trac/changeset/10344/ > > Could it please be included in the inn2 package shipped with Buster? I think that we are way too late for 10.0, but I will make a new package

Bug#931256: Failure of DHE key exchanges with OpenSSL security level 2

2019-06-29 Thread Julien ÉLIE
Package: inn2 Version: 2.6.3-1 Hi, There is a TLS-related issue with INN 2.6.3 if the "security level" feature of OpenSSL 1.1 is used: negotiations for ciphersuites using DHE key exchange fail if the security level is set to something beyond 1. The upcoming Debian 10 (Buster) seems to do