Re: [exim] TLSv1 not supported ?

Góra strony
Delete this message
Reply to this message
Autor: David Saez Padros
Data:  
Dla: exim-users
Temat: Re: [exim] TLSv1 not supported ?
Hi

thanx guys !

i know it's openssl for sure because i compiled Exim with it, the OS
is Debian buster and the issue was due to MinProtocol setting in
/etc/ssl/openssl.cnf as suggested by Viktor and Evgeniy

> On Fri, Dec 27, 2019 at 08:17:39PM +0100, basti via Exim-users wrote:
>> Hello,
>> first of all some distribution use openssl and some use gnutls.
>> check this with 'exim -bV'
>
> Symbol "tls_early_post_process_client_hello" is in openssl 1.1+ library.
>
>> On 27.12.19 19:53, David Saez Padros via Exim-users wrote:
>>> Hi
>>>
>>> a remote server which was able to send us mail using
>>> P=esmtps X=TLSv1:DHE-RSA-AES256-SHA:256 , after upgrading to Exim 4.93 +
>>> OpenSSL 1.1.1d is no longer able to send mail to us, logging this error:
>>>
>>> (SSL_accept): error:14209102:SSL
>>> routines:tls_early_post_process_client_hello:unsupported protocol
>
> David, try to locate global libssl config (probably /etc/ssl/openssl.cnf)
> and look there for MinProtocol value.
>


--
Thanx & best regards ...

----------------------------------------------------------------
    David Saez
    On-Line Services 2000 S.L.
    http://www.ols.es
----------------------------------------------------------------