aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMatthias Andree <matthias.andree@gmx.de>2021-12-12 14:02:56 +0100
committerMatthias Andree <matthias.andree@gmx.de>2021-12-12 14:02:56 +0100
commit76c4fdda908e58baab78cb9074e8e8e1d1a22400 (patch)
treed776060d8593e06f4f5a2fcf435158c54eb12943
parentba46eab365eefdd278f021d40326d34c9c613894 (diff)
downloadfetchmail-76c4fdda908e58baab78cb9074e8e8e1d1a22400.tar.gz
fetchmail-76c4fdda908e58baab78cb9074e8e8e1d1a22400.tar.bz2
fetchmail-76c4fdda908e58baab78cb9074e8e8e1d1a22400.zip
Remove OpenSSL migration warnings.
-rw-r--r--NEWS2
-rw-r--r--fetchmail.man9
2 files changed, 0 insertions, 11 deletions
diff --git a/NEWS b/NEWS
index c9ccd12e..4aa1d2c2 100644
--- a/NEWS
+++ b/NEWS
@@ -55,8 +55,6 @@ removed from a 6.5.0 or newer release.)
requirements (dependencies), such as Boost or other class libraries.
* The softbounce option default will change to "false" in the next release.
* The --bsmtp - mode of operation may be removed in a future release.
-* Given that OpenSSL is severely underdocumented, and needs license exceptions,
- fetchmail may switch to a different SSL library.
* SSLv3 support may be removed from a future fetchmail release. It has been
obsolete for many years and found insecure. Use TLS.
* Fetchmailconf is deprecated and will be removed from a future release.
diff --git a/fetchmail.man b/fetchmail.man
index 484b9dde..b1edcde7 100644
--- a/fetchmail.man
+++ b/fetchmail.man
@@ -1205,15 +1205,6 @@ All retrieval protocols can use SSL or TLS wrapping for the
transport. Additionally, POP3 and IMAP retrieval can also negotiate
SSL/TLS by means of STARTTLS (or STLS).
.PP
-Note that fetchmail currently uses the OpenSSL library, which is
-somewhat under-documented, so failures may occur just because the
-programmers are not aware of OpenSSL's requirement of the day.
-For instance, since v6.3.16, fetchmail calls
-OpenSSL_add_all_algorithms(), which is necessary to support certificates
-using SHA256 on OpenSSL 0.9.8 -- this information is deeply hidden in
-the documentation and not at all obvious. Please do not hesitate to
-report subtle TLS or SSL failures.
-.PP
You can access TLS-encrypted services by specifying the options starting
with \-\-ssl, such as \-\-ssl, \-\-sslproto, \-\-sslcertck, and others.
You can also do this using the corresponding user options in the .fetchmailrc