GNU bug report logs - #13406
24.2.92; gnus fails imap connection with TLS

Previous Next

Full log

Message #11 received at 13406 <at> debbugs.gnu.org (full text, mbox):

From: Rainer Orth <ro <at> CeBiTec.Uni-Bielefeld.DE>
To: 13406 <at> debbugs.gnu.org
Subject: Re: bug#13406: 24.2.92; gnus fails imap connection with TLS
Date: Tue, 15 Jan 2013 11:24:29 +0100

Ted Zlatanov <tzz <at> lifelogs.com> writes:

> Can you try from the command line, with `gnutls-cli'?

gnutls-cli isn't installed on Solaris 11, so I built the upstream
version of gnutls 2.8.6 myself.  With the unchanged version, imap with
TLS works fine.  I've then dug up the build receipe on opensolaris.org
and found that the fix for CVE-2012-1573 is wrong: while upstream

http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=422214868061370aeeb0ac9cd0f021a5c350a57d;hp=cfea38b5482c21fe6ddffaddc59a0040f80bd578

uses a ciphertext.size < hash_size test, Solaris has

http://src.opensolaris.org/source/xref/jds/spec-files/branches/gnome-2-30-s11update/patches/gnutls-02-cve-2012-1573.diff

> hash_size instead.

So the report is invalid and I'll report upstream.

	Rainer

-- 
-----------------------------------------------------------------------------
Rainer Orth, Center for Biotechnology, Bielefeld University

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.