[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Bug#766395: emacs/gnus: Uses s_client to for SSL.
From: |
Rob Browning |
Subject: |
Re: Bug#766395: emacs/gnus: Uses s_client to for SSL. |
Date: |
Wed, 22 Oct 2014 15:02:17 -0500 |
User-agent: |
Notmuch/0.18.1 (http://notmuchmail.org) Emacs/24.4.1 (x86_64-pc-linux-gnu) |
[When possible, please preserve the -forwarded address in any replies.]
The following issue was just reported against emacs23 in Debian, and
from a quick glance, it looks like 24.4 still uses s_client, so if this
is a problem, it's perhaps still relevant.
Kurt Roeckx <address@hidden> writes:
> It has come to my attention that Gnus is using s_client to set up
> SSL connections to retrieve email. Please stop using that.
> s_client is a debug tool, it does not set up a secure connection,
> it ignores all errors and just continues. It also doesn't do
> checks it should be doing. This is all documented behaviour.
>
> Please get rid of all documentation, configurations and examples
> that tell you how to set it up using s_client.
>
> I've also seen examples adding -ssl2 and -ssl3 which is really
> really broken.
Thanks
--
Rob Browning
rlb @defaultvalue.org and @debian.org
GPG as of 2011-07-10 E6A9 DA3C C9FD 1FF8 C676 D2C4 C0F0 39E9 ED1B 597A
GPG as of 2002-11-03 14DD 432F AE39 534D B592 F9A0 25C8 D377 8C7E 73A4