Re: Bug#803204: libiksemel: utterly insecure GNUTLS settings

2015-11-12 Thread duck
Coin, On 2015-11-12 11:04, Simon Josefsson wrote: I would suggest to use gnutls_set_default_priority() instead of hard-coding a priority string into applications. Your hard coded priority string will be just as obsolete as the hard coded values you are replacing in a couple of years. You're r

Re: Bug#803204: libiksemel: utterly insecure GNUTLS settings

2015-11-12 Thread Simon Josefsson
I would suggest to use gnutls_set_default_priority() instead of hard-coding a priority string into applications. Your hard coded priority string will be just as obsolete as the hard coded values you are replacing in a couple of years. /Simon signature.asc Description: PGP signature

libiksemel: utterly insecure GNUTLS settings

2015-10-27 Thread duck
Package: libiksemel Version: 1.4-2 Severity: grave tags: security Control: affects -1 = zabbix-server-pgsql zabbix-server-mysql Coin, Since I changed my XMPP server, Zabbix failed to send alerts via XMPP with "tls handshake failed". The XMPP server said "no shared cipher". After some research