summaryrefslogtreecommitdiffstats
path: root/README.SSL
diff options
context:
space:
mode:
authorThomas Roessler <roessler@does-not-exist.org>2000-03-15 23:25:42 +0000
committerThomas Roessler <roessler@does-not-exist.org>2000-03-15 23:25:42 +0000
commit8db11a8a18bf025186ac9913c1c9ea79df0bc66e (patch)
treeacdcf9336d01a6d1e3c960e275d2260b049c5a31 /README.SSL
parent22c700e41e30c5a6a1c99187baecbbbeb6eed298 (diff)
Fix entropy gathering in the IMAP SSL support. From Tommi Komulainen.
Diffstat (limited to 'README.SSL')
-rw-r--r--README.SSL15
1 files changed, 15 insertions, 0 deletions
diff --git a/README.SSL b/README.SSL
index 38367d80..1cdceab4 100644
--- a/README.SSL
+++ b/README.SSL
@@ -26,6 +26,21 @@ For example:
mailboxes {localhost:994/ssl}inbox
+If you get errors about lack of entropy, it means that Mutt was unable
+to find a source of random data to initialize SSL library with. Should
+this happen, you need to generate the data yourself and save it in a
+file somewhere Mutt will find it. Mutt tries to use files
+$SslEntropyFile, $RANDFILE (if this environment variable is set) and
+~/.rnd in that order as source for random data.
+
+If your OpenSSL is version 0.9.5 or later, you should try EGD, Entropy
+Gathering Daemon, from http://www.lothar.com/tech/crypto/ . Mutt will
+try to find EGD sockets in the following places, $SslEntropyFile,
+$EGDSOCKET (if this environment variable is set), ~/.entropy and
+/tmp/entropy. If no socket is found, static files will be tried as
+described above.
+
+
Each time a server is contacted, its certificate is checked against
known valid certificates. When an unknown certificate is encountered,
you are asked to verify it. If you reject the certificate, the