Re: Cipher list

2021-12-07 Thread Steve
On Tue, Dec 07, 2021 at 09:57:11PM +0100, Thomas L. wrote: > > Where do you find the definition of cipher settings: all, insecure, > > default, etc? The "man tls_config_set_ciphers" mentions them but > > doesn't define them. Neither does "man openssl". > > > >

Re: Cipher list

2021-12-07 Thread Thomas L.
> Where do you find the definition of cipher settings: all, insecure, > default, etc? The "man tls_config_set_ciphers" mentions them but > doesn't define them. Neither does "man openssl". > > "TLSv1.2:ECDHE-RSA-AES256-SHA384:256" looks reasonably modern, why is > it not part of "ciphers secure"?

Re: Cipher list

2021-12-07 Thread Steve
On Mon, Dec 06, 2021 at 10:35:45AM -0500, Steve wrote: > Hello. > > I recently upgraded my mail server from openbsd 6.8 to 7.0, and I now have one > person that cannot email me due to: > > io-error: handshake failed: error:140260C1:SSL > routines:ACCEPT_SR_CLNT_HELLO:no shared cipher > > I'm