From Newsgroup: comp.lang.tcl

My commitment to life on the bleeding edge ( :-) ) has led me to build
and install the above package.

When I ran "make test", I had errors from BadSSL-1.12 dh composite and BadSSL-1.23 dh1024. Both report "dh key too small" when the attempt to connect.

I only use TCL so that I can register the https protocol with the http package, and this error doesn't seem to affect this, so I attach
absolutely no priority to resolving this fault. FWIW, I think this is
fewer errors than I had when test TclTCL-2.0, where I simply noted there
were "rather a lot of errors".


Thanks again for the good work with this package, and especially the
help building a few months back :-).



Alan
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.lang.tcl

On 03/07/2026 15:41, Alan Grunwald wrote:

My commitment to life on the bleeding edge ( :-) ) has led me to build
and install the above package.

When I ran "make test", I had errors from BadSSL-1.12 dh composite and BadSSL-1.23 dh1024. Both report "dh key too small" when the attempt to connect.

I only use TCL so that I can register the https protocol with the http package, and this error doesn't seem to affect this, so I attach
absolutely no priority to resolving this fault. FWIW, I think this is
fewer errors than I had when test TclTCL-2.0, where I simply noted there were "rather a lot of errors".

Thanks again for the good work with this package, and especially the
help building a few months back :-).

Alan

Sorry - a major typo in the third paragraph, which should start "I only
use TLS...".
--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.lang.tcl

On 7/3/26 9:59 AM, Alan Grunwald wrote:

On 03/07/2026 15:41, Alan Grunwald wrote:

My commitment to life on the bleeding edge ( :-) ) has led me to build
and install the above package.

When I ran "make test", I had errors from BadSSL-1.12 dh composite and
BadSSL-1.23 dh1024. Both report "dh key too small" when the attempt to
connect.

I only use TCL so that I can register the https protocol with the http
package, and this error doesn't seem to affect this, so I attach
absolutely no priority to resolving this fault. FWIW, I think this is
fewer errors than I had when test TclTCL-2.0, where I simply noted
there were "rather a lot of errors".


Thanks again for the good work with this package, and especially the
help building a few months back :-).



Alan

Sorry - a major typo in the third paragraph, which should start "I only
use TLS...".

You didn't say which version of OpenSSL you are using. The different
versions of OpenSSL will yield different error messages since OpenSSL
has been restricting when the smaller key sizes can be used. The test
script attempts to account for these differences, but may have missed one.

--- Synchronet 3.22a-Linux NewsLink 1.2

From Newsgroup: comp.lang.tcl

That's enough info. Some Linux distros hold to old versions of OpenSSL,
but includes changes from newer versions. That appears to be the case
here where you are using an OpenSSL 3.0 which allows those smaller sizes
since it was restricted starting in OpenSSL 3.2. You can ignore those
errors.


-----Original Message-----
From: Alan Grunwald [mailto:alan.m.grunwald@gmail.com]
Sent: Friday, July 03, 2026 12:43 PM
To: Brian
Subject: Re: Test failures in TclTLS-2.0.1

On 03/07/2026 18:36, Brian wrote:

On 7/3/26 9:59 AM, Alan Grunwald wrote:

On 03/07/2026 15:41, Alan Grunwald wrote:

My commitment to life on the bleeding edge ( :-) ) has led me to
build and install the above package.

When I ran "make test", I had errors from BadSSL-1.12 dh composite
and BadSSL-1.23 dh1024. Both report "dh key too small" when the
attempt to connect.

I only use TCL so that I can register the https protocol with the
http package, and this error doesn't seem to affect this, so I attach
absolutely no priority to resolving this fault. FWIW, I think this is
fewer errors than I had when test TclTCL-2.0, where I simply noted
there were "rather a lot of errors".


Thanks again for the good work with this package, and especially the
help building a few months back :-).



Alan

Sorry - a major typo in the third paragraph, which should start "I
only use TLS...".

You didn't say which version of OpenSSL you are using. The different versions of OpenSSL will yield different error messages since OpenSSL
has been restricting when the smaller key sizes can be used. The test
script attempts to account for these differences, but may have missed

one.


$ openssl version
OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)

Do I need to do something else to find my OpenSSL version?

I'm running Linux Mint 21.3 (virginia).

--- Synchronet 3.22a-Linux NewsLink 1.2