On Fri, Dec 27, 2013 at 04:11:40PM -0600, Bobber wrote:
> > > TLS started w/ cipher DES-CBC3-SHA
> >
> >There's your problem! This server (likely Exchange 2003) has a
> >broken implementation of 3DES CBC padding (search Postfix users
> >archives for my posts on the subject), and your cipher list is
> >either long enough to cause it to not see RC4-SHA and RC4-MD5 or
> >you've disabled RC4 (directly, or by only enabling HIGH grade
> >ciphers).
>
> Does Micro$oft have a fix for this?
They did, in 2007, but the software in question is no longer
supported and AFAIK the hotfix is no longer available. The domain
in question is running "abandon-ware".
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
