On Sun, Sep 24, 2023 at 04:52:13PM +0300, Klemens Nanni wrote:
> On Sun, Sep 24, 2023 at 02:21:20PM +0200, Theo Buehler wrote:
> > > Perhaps SSL 3.0 or TLS 1.0 or plain text connections work?
> >
> > They won't. tcltls uses libssl where 3.0 was disabled eons ago and Bob
> > disabled 1.0 in Tallinn.
>
> And libssl does not do TLS 1.1/2/3? That be my interpretation of being
> unable to connect to standard XMPP servers in coccinella.
>
> If so, that's not good the three security/tcltls in the tree:
> net/coccinella
> net/tkabber/base
> net/tkabber/plugins
>
> Cc'ing maintainer: tkabber's both HOMEPAGE and SITE HTTP redirect to a
> TLS site with mismatching certificate subjects, so fetching already relies
> on our ftp.o.o mirror and I don't see any tcltls, coccinella or tkabber
> update... anyone still using XMPP via these Tcl clients?
>
Hi,
as a casual Tcl lang user, I can say that the tcltls port works fine
afaict with TLS 1.2 and 1.3.
I don't use any of the consumers in the tree though, but some
home-grown code. I'd hate to see tcltls go.
--
Matthieu Herrb
No comments:
Post a Comment