Re: [exim] Expiriences with TLS 1.3

Top Page
Delete this message
Reply to this message
Author: Viktor Dukhovni
Date:  
To: exim-users
Subject: Re: [exim] Expiriences with TLS 1.3
On Tue, Jan 29, 2019 at 06:53:33PM +0200, Max Kostikov via Exim-users wrote:

> Jeremy Harris via Exim-users писал 2019-01-28 13:56:
> > I've not seen any such connections in production yet.
>
> FreeBSD 12 have OpenSSL 1.1.1 in base system so I see entries in the
> Exim log.


For the record, not in the base system, which has OpenSSL 1.0.2,
but in ports (unless my FreeBSD 12 release is already dated).

> Jan 29 08:30:44 beta exim[2522]: 1goMux-0000eg-Dq <=
> bugzilla-noreply@??? H=mx2.freebsd.org
> [2001:1900:2254:206a::19:2] I=[2001:470:28:26f::1]:25 P=esmtps
> X=TLSv1.3:TLS_AES_256_GCM_SHA384:256 CV=no S=3612 from
> <bugzilla-noreply@???> for max@???


And similar in Postfix:

  Jan 28 14:24:59 straasha postfix/smtp[81533]:
    Verified TLS connection established to mx.halon.io[159.253.27.254]:25:
    TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256)
    server-signature RSA-PSS (2048 bits) server-digest SHA256


  Jan 29 11:42:45 straasha postfix/smtpd[7070]:
    Anonymous TLS connection established from mx2.freebsd.org[8.8.178.116]:
    TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519
    server-signature RSA-PSS (2048 bits) server-digest SHA256


-- 
    Viktor.