First of all, the config; ASSP SSL is configured as follows

DoTLS = do TLS
SSL_version = TLSv1
SSL_cipher_list = HIGH:!LOW:@STRENGTH

so basically the SSL configuration isn't so strict (for the sake of
testing I left the cipher list quite relaxed); now the problem: using
openssl I tested the ASSP as follows:

openssl s_client -connect my.assp.xyz:25

openssl s_client -starttls smtp -connect my.assp.xyz:25

both the above work without problems, they report that the connection
is encrypted and that the used protocol is TLSv1... but then, if I try
the following

openssl s_client -starttls smtp -tls1_1 -connect my.assp.xyz:25

openssl s_client -starttls smtp -tls1_2 -connect my.assp.xyz:25

in both cases the result is a failure; now... why is ASSP only
supporting TLSv1 and not 1.1 and 1.2 ?







------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to