[mew-int 3181] Re: severe SSL issues

Werner LEMBERG wl at example.com
Fri Jan 10 02:10:15 JST 2014


> I have gone through similar problems. The problem is related to FIPS, but
> I could not find a simple solution.
> So I went for a very simple solution :-)
>
> Install stunnel-4.53-1.1.x86_64 from security:Stunnel
> (and not any newer versions)

Hehe :-)

However, I finally found a solution.  After upgrading to the current
git version of Mew, I saw

  commit cf7168b2fd5f93466cc6a5323c0a720834c80904
  Author: Michael Ernst <mernst at example.com>
  Date:   Fri Aug 2 08:48:19 2013 -0700

    Fix mew-prog-ssl-arg with stunnel 4

    Currently, variable mew-prog-ssl-arg is ignored when using
    stunnel 4.  This makes it difficult to supply extra arguments to
    stunnel 4.  A reason to do so is to work around a stunnel
    installation that does not support FIPS.  This patch corrects the
    problem.  Ref. [mew-int 3158]

And indeed, adding the line

  (setq mew-prog-ssl-arg "fips=no\n")

to `.emacs' makes openSuSE's stunnel work.


    Werner



More information about the Mew-int mailing list