diff options
| author | Phil Pennock <pdp@exim.org> | 2012-06-24 02:55:29 -0700 |
|---|---|---|
| committer | Phil Pennock <pdp@exim.org> | 2012-06-24 02:55:29 -0700 |
| commit | a5f239e4959d4df6a4a341d8855e14d17399d671 (patch) | |
| tree | b146fc0467aa091e862fea4cbb038aaf3318aaa3 /src/README.UPDATING | |
| parent | 585121e2682545b7afa599e039a7a1e2b1804570 (diff) | |
| download | exim4-a5f239e4959d4df6a4a341d8855e14d17399d671.tar.gz | |
Add gnutls_enable_pkcs11 option.
GnuTLS 2.12.0 adds PKCS11 support using p11-kit and by default will
autoload modules, which interoperates badly with GNOME keyring
integration, configured via paths in environment variables, and Exim
invoked by the user (eg, mailq) will then try to load the modules, fail
and spew warnings from the module for a library loaded by a library.
http://www.gnu.org/software/gnutls/manual/gnutls.html#Smart-cards-and-HSMs
documents that to prevent this, explicitly init PKCS11 before calling
gnutls_global_init(). So we do so, unless the admin sets the new
option.
Reported by Andreas Metzler, who confirmed that the added calls fixed
the problem for him.
Diffstat (limited to 'src/README.UPDATING')
| -rw-r--r-- | src/README.UPDATING | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/src/README.UPDATING b/src/README.UPDATING index d34dec1e1..b7406f43c 100644 --- a/src/README.UPDATING +++ b/src/README.UPDATING @@ -26,6 +26,13 @@ The rest of this document contains information about changes in 4.xx releases that might affect a running system. +Exim version 4.81 +----------------- + + * New option gnutls_enable_pkcs11 defaults false; if you have GnuTLS 2.12.0 + or later and do want PKCS11 modules to be autoloaded, then set this option. + + Exim version 4.80 ----------------- |