On Sat, Mar 25, 2023 at 8:20 AM Neal H. Walfield neal@walfield.org wrote:

Panu wrote https://bugzilla.redhat.com/show_bug.cgi?id=2170878#c126 :

...

To me the key points here are

1. there's a lot of obsolete/broken crypto out there
2. we need better error messages

Properly dealing with 2) needs an API redesign, but we'll try to work

out some sort of bandaid solution.

Are better diagnostics sufficient from your point of view, or are you looking for a different solution?

I think my question in https://bugzilla.redhat.com/show_bug.cgi?id=2170878#c125 wasn't really answered, or at least I don't understand the implications.