On Thu, Aug 27, 2015 at 02:44:40PM +0000, Viktor Dukhovni wrote:
> I just tried:
>
> $ posttls-finger ringways.co.uk
> posttls-finger: Connected to mail.ringways.co.uk[88.211.105.31]:25
...
> posttls-finger: < 220 TLS go ahead
> posttls-finger: SSL_connect error to mail.ringways.co.uk[88.211.105.31]:25: Connection timed out
>
> Are you using /dev/random, rather than /dev/urandom for entropy?
I tried "openssl s_client -connect mail.ringways.co.uk:25 -starttls smtp"
with -tls1_1 and -tls1_2 options. The first option leads to very quick
connect, tls handhaske and server prompt, the second leads to hangup
after ClientHello.
I don't know whether the difference between TLS protocol versions is
related to usage of kernel random/urandom interfaces by crypto libs.
--
Eugene Berdnikov
