Hi.

if I copy an existing cipher in OpenSSL and rename it, it will act as if it is a new cipher.

Would I need to build postfix against this new OpenSSL to be able to use the new cipher? I think it's not required but I have a doubt. How does the TLS negociation work ? I guess it is done by Postfix which asks OpenSSL what ciphers are supported and depending of the negociation, Postfix stores the cipher's OID selected. Therefore Postfix wouldn't care of the existing ciphers and would just select the strongest one among the ciphers presented by OpenSSL.

All this for my first question, would it be required to rebuild postfix if a new cipher makes its way in OpenSSL to be able to use it?

Thanks,
   Gregory.



Reply via email to