gnutls 2.9.10 breaks exim4 TLS (Denying unsafe (re)negotiation.)

[Nikos Mavrogiannopoulos]

Andreas Metzler wrote:
> Hello,

> I have not managed to reproduce the error with gnutls-cli. When
> looking at exim's tls code
> http://git.exim.org/exim.git/blob_plain/HEAD:/exim-src/src/tls-gnu.c
> one big difference to gnutls-cli is that exim only uses the specific
> gnutls_*_set_priority() functions while gnutls-cli *always* invokes
> gnutls_priority_set_direct() in the first place. Perhaps an
> unintended dependency on gnutls_priority_*() was introduced?

How easy would it be for exim to use gnutls_priority_* functions? The
others have been deprecated for quite a time. Moreover it would be
easier for exim to setup a configuration string for the
priority_set_direct function.

regards,
Nikos