search

JuliaWeb / GnuTLS.jl

Transport Level Security for Julia Streams provided by GnuTLS
Other
8 stars 13 forks source link

require GnuTLS >= 2.9.10? #4

Closed stevengj closed 9 years ago

stevengj commented 11 years ago

As discussed [https://groups.google.com/forum/?fromgroups=#!topic/julia-users/pwCg0_KjJ7Y on the mailing list], there seem to be some problems with HMAC signatures with old GnuTLS versions. According to their [http://gitorious.org/gnutls/gnutls/blobs/master/NEWS NEWS file], the gnutls_hmac_* functions were apparently only added in 2.9.10.

sbromberger commented 9 years ago

I've implemented warnings for outdated GnuTLS versions in #36. Basically, we need to keep up with security alerts and set GNUTLS_MINSECURE_VER in GnuTLS.jl for each supported major/minor pair.