On Sun, 16 Oct 2005 the mental interface of Jakob Hirsch told:

Elimar Riesebieter wrote:

...

Building with openssl 0.9.8 there are connection errors:

Some people reported problems with 0.9.8, which are gone after a downgrade to 0.9.7.

...

Any hints? Please notice I prefer gnutls ;-)

Can't help you with this. What is with gnutls that you prefer it. Better performance, security, handling?

GNUTLS is LGPL'd ;)

Elimar

You cannot propel yourself forward by patting yourself on the back.

On Sun, 16 Oct 2005 the mental interface of Timo Sirainen told:

On Sun, 2005-10-16 at 01:34 +0200, Elimar Riesebieter wrote:

...

Hi all,

tried to build dovecot-1.0.alpha3 with gnutls. The build stops something like: ssl-proxy-gnutls.c:420: warning: 'gnutls_dh_params_set' is
deprecated (declared at /usr/include/gnutls/compat8.h:82) ssl-proxy-gnutls.c: In function 'read_rsa_parameters':
ssl-proxy-gnutls.c:446: warning: 'gnutls_rsa_params_set' is
deprecated (declared at /usr/include/gnutls/compat8.h:77) make[4]: *** [ssl-proxy-gnutls.o] Error 1

Well, it should have said instead:

#error broken currently

The code is basically in need of a rewrite. Very low priority for myself.

Its a matter of licence. GNUTLS is LGPL'd wich make it much easier to add it to GPL'd programs like i.e. curl. There is a discussion on debian-devel, wher many developers want to make GNUTLS the default and wipe out openssl. The licence of dovecot allows to use the openssl licence though.

*/ just for info http://www.gnome.org/~markmc/openssl-and-the-gpl.html */

...

Building with openssl 0.9.8 there are connection errors:

dovecot: Oct 15 22:46:48 Error: imap-login: Can't load certificate
file /etc/ssl/certs/dovecot.pem: error:25066067:DSO support
routines:DLFCN_LOAD:could not load the shared library

I don't really know about this. Looks like OpenSSL 0.9.8 does something weird. Or maybe it's just Debian's bug? Og course it is.

Thanks Elimar

Alles was viel bedacht wird ist bedenklich!;-) Friedrich Nietzsche