Commit | Line | Data |
---|---|---|
b5aea5e1 | 1 | $Cambridge: exim/doc/doc-txt/NewStuff,v 1.27 2005/03/08 11:38:21 ph10 Exp $ |
495ae4b0 PH |
2 | |
3 | New Features in Exim | |
4 | -------------------- | |
5 | ||
6 | This file contains descriptions of new features that have been added to Exim, | |
7 | but have not yet made it into the main manual (which is most conveniently | |
8 | updated when there is a relatively large batch of changes). The doc/ChangeLog | |
9 | file contains a listing of all changes, including bug fixes. | |
10 | ||
11 | ||
b5aea5e1 PH |
12 | Version 4.51 |
13 | ------------ | |
14 | ||
15 | PH/01. The format in which GnuTLS parameters are written to the gnutls-param | |
16 | file in the spool directory has been changed. This change has been made | |
17 | to alleviate problems that some people had with the generation of the | |
18 | parameters by Exim when /dev/random was exhausted. In this situation, | |
19 | Exim would hang until /dev/random acquired some more entropy. | |
20 | ||
21 | The new code exports and imports the DH and RSA parameters in PEM | |
22 | format. This means that the parameters can be generated externally using | |
23 | the certtool command that is part of GnuTLS. | |
24 | ||
25 | To replace the parameters with new ones, instead of deleting the file | |
26 | and letting Exim re-create it, you can generate new parameters using | |
27 | certtool and, when this has been done, replace Exim's cache file by | |
28 | renaming. The relevant commands are something like this: | |
29 | ||
30 | # rm -f new.params | |
31 | # touch new.params | |
32 | # chown exim:exim new.params | |
33 | # chmod 0400 new.params | |
34 | # certtool --generate-privkey --bits 512 >new.params | |
35 | # echo "" >>new.params | |
36 | # certtool --generate-dh-params --bits 1024 >> new.params | |
37 | # mv new.params params | |
38 | ||
39 | If Exim never has to generate the parameters itself, the possibility of | |
40 | stalling is removed. | |
41 | ||
42 | ||
f7b63901 | 43 | Version 4.50 |
35edf2ff PH |
44 | ------------ |
45 | ||
b9e40c51 | 46 | The documentation is up-to-date for the 4.50 release. |
495ae4b0 PH |
47 | |
48 | **** |