diff options
| author | Phil Pennock <pdp@exim.org> | 2016-05-29 02:31:18 -0400 |
|---|---|---|
| committer | Phil Pennock <pdp@exim.org> | 2016-10-08 19:23:37 -0400 |
| commit | 317e40ac8b1b816f4a22620a5647c6258de61598 (patch) | |
| tree | 46f3796e23ecca09e0992b1a25eadaf8d062a466 /src/scripts | |
| parent | ae5afa61184b6c9b39f58804032b32b42e3ba44e (diff) | |
| download | exim4-317e40ac8b1b816f4a22620a5647c6258de61598.tar.gz | |
DH parameters update, new values & defaultexim-4_88_RC2pdp_new_dhparam
* Add three new Exim-specific DH parameter constants; state provenance,
but no way for others to verify; this is a signed commit, which is
about as much as we can do for the truly paranoid: provide an audit
trail.
* Add the RFC 7919 DH primes
+ No TLS feature negotiation, per 7919, but the DH primes can be used
if folks so choose
* Fixed broken format string in util/gen_pkcs3.c
* Tried to make gen_pkcs3.c support q values.
+ Turns out, q doesn't affect the PEM and that's not a mistake in my
initialisation; I've checked with a cryptographer, we're losing some
server-side optimizations but not any security properties for our
scenario.
Fixes: 1895
Diffstat (limited to 'src/scripts')
| -rw-r--r-- | src/scripts/source_checks | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/scripts/source_checks b/src/scripts/source_checks index 6da8a8664..918a6f8eb 100644 --- a/src/scripts/source_checks +++ b/src/scripts/source_checks @@ -19,6 +19,7 @@ done <<-END globals.c header_names globals.c log_options expand.c item_table + std-crypto.c dh_constants transport.c optionlist_transports route.c optionlist_routers transports/appendfile.c appendfile_transport_options |