On Fri, Sep 30, 2022 at 02:04:51PM +0100, Jeremy Harris via Exim-users wrote:
> Ah, the difference is the total lack of TLS extensions
> in the Client Hello.
>
> Commit ece23f05d6 pushed.
>
> Note that this client won't work against current OpenSSL
> default builds.
When you say "current" you mean 3.1-dev? What is the observed failure
mode? It "works" against the latest OpenSSL 1.1.1 (the server responds
with server hello, certificate, ..., server hello done).
Perhaps TLS 1.1 is not enabled in your build?
--
Viktor.
