[Kmymoney] Using old SSL preparation code ?

[Thomas Baumgart]

Edgar,

On Monday 13 April 2015 21:48:08 Dr.-Ing. Edgar Alwers wrote:

> Hallo,
> 
> I am working without problems with KMM-Version 4.7.1. However, with each
> transaction I am doing, e.g. updating an account, I get  red comments in the
> list of messages
> 
> "Using old SSL preparation code"
> 
> I presume, this refers in some way to the aqFinance part of M.Preuß, but I
> am not sure. Anyway, it is not generating problems, but I would very much
> like to use the "actual" SSL preparation code.

In deed it refers to the Gwenhywfar Library of Martin Preuss which is also 
used in his aqFinance project as well as the AqBanking library. Both are also 
used in KMyMoney.


Well, it is not too bad to use the 'old' SSL preparation code if the cipher 
exchange results in using a safe method. Here's what can be found on the 
AqBanking mailing list in January 2015 regarding the same question:

---8<---
Das weist darauf hin, dass Martin Preuss hier noch eine Baustelle
offen hat 

Nach Snowden gab es Versuche für aqbanking in der Kryptoaushandlung
mit den Banken potentiell unsichere Verfahren wie RC4-MD5 (Hallo,
Postbank!) auszuschließen. Da die damalige Negativliste zu Problemen
mit verschiedenen anderen Banken geführt hat, wurde von Martin Preuss
der alte Codeteil wieder aktiviert. Darauf weist der "using old SSL
preparation code" hin.

Es ist somit alles OK, trotz der roten Schrift.
---8<---


> Any hints what I should do ?

Avoid using banks that still use unsafe ciphers like Postbank.

Hope that helps.


-- 

Regards

Thomas Baumgart

GPG-FP: E55E D592 F45F 116B 8429   4F99 9C59 DB40 B75D D3BA
-------------------------------------------------------------
'Knowing a computer language is neither a necessary nor a sufficient
condition to know how to construct a computer program' -- J.R. Tyrer
-------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 225 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kmymoney/attachments/20150413/378e1c98/attachment.sig>