Menu
▾
▴
Re: [Assp-user] ssl_version and TLS support
|
From: Robert K C. J. -I. F. D. Corp. <bco...@in...> - 2023-06-29 16:08:14
|
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Further information - <br>
</p>
<p>According to Buffalo, this model supports TLS 1.0 and TLS 1.1.</p>
<p>This setting:</p>
<p>"'SSLv23' and the older definition 'SSLv2/3' (of the same) uses a
handshake compatible with SSL2.0, SSL3.0 and TLS1.x" seems to
indicate that this should work, but it is not.</p>
<p>What am I missing?</p>
<p><br>
</p>
<p>- Bob<br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 6/20/2023 6:02 PM, Robert K Coffman
Jr. -Info From Data Corp. wrote:<br>
</div>
<blockquote type="cite"
cite="mid:e2f...@in...">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p>On a similar note, I discovered my Buffalo NAS aren't able to
use STARTTLS to send health reports. They are Linkstation 210
using current firmware from Buffalo.<br>
</p>
<p>I recently did a full upgrade of the ASSP host (Ubuntu) and
ASSP.</p>
<p>This is logged, but I'm not sure how to tell what protocol is
in use.</p>
<p>Jun-20-23 17:56:11 [Worker_1] 104.188.144.67 error: Couldn't
upgrade to TLS for client 104.188.144.67: SSL accept attempt
failed error:0A000102:SSL routines::unsupported protocol</p>
<p>SSL key cipher list (default)</p>
<p>SSL_version (SSLv23:!SSLv3:!SSLv2)</p>
<p>Net::SMTP::SSL module version 1.02 installed and available<br>
IO::Socket::SSL module version 2.074 installed - https and
TLS/SSL is possible<br>
Found valid certificate and private key file - https and TLS/SSL
is available<br>
The underlying SSL library Net::SSLeay version 1.92 uses OpenSSL
3.0.2 15 Mar 2022<br>
</p>
<p>- Robert<br>
</p>
<div class="moz-cite-prefix">On 6/19/2023 10:06 PM, Daniel L.
Miller via Assp-user wrote:<br>
</div>
<blockquote type="cite"
cite="mid:AMF...@c9...">
<meta http-equiv="content-type" content="text/html;
charset=UTF-8">
<style id="css_styles">blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }a img { border: 0px; }li[style='text-align: center;'], li[style='text-align: center; '], li[style='text-align: right;'], li[style='text-align: right; '] { list-style-position: inside;}body { font-family: 'Segoe UI'; font-size: 12pt; }.quote { margin-left: 1em; margin-right: 1em; border-left: 5px #ebebeb solid; padding-left: 0.3em; }</style>
<div>I currently have the default of "SSLv23:!SSLv3:!SSLv2" for
ssl_version. Various online MX health checkers report my
servers as not supporting TLS.</div>
<div><br>
</div>
<div>Should I change my ssl_version? Possible add a ":TLSv1_3"
to the end?</div>
<div><br>
</div>
<div id="signature_old" style="clear:both">--
<div>Daniel</div>
</div>
<div><br>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Assp-user mailing list
<a class="moz-txt-link-abbreviated moz-txt-link-freetext" href="mailto:Ass...@li..." moz-do-not-send="true">Ass...@li...</a>
<a class="moz-txt-link-freetext" href="https://lists.sourceforge.net/lists/listinfo/assp-user" moz-do-not-send="true">https://lists.sourceforge.net/lists/listinfo/assp-user</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Robert K Coffman Jr.
Info From Data Corp.
3307249000
<a class="moz-txt-link-abbreviated moz-txt-link-freetext" href="mailto:su...@in..." moz-do-not-send="true">su...@in...</a></pre>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Assp-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Ass...@li...">Ass...@li...</a>
<a class="moz-txt-link-freetext" href="https://lists.sourceforge.net/lists/listinfo/assp-user">https://lists.sourceforge.net/lists/listinfo/assp-user</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Robert K Coffman Jr.
Info From Data Corp.
3307249000
<a class="moz-txt-link-abbreviated" href="mailto:su...@in...">su...@in...</a></pre>
</body>
</html>
|
