>why is ASSP only supporting TLSv1

ASSP DOES NOT support anything ! It only uses supported implementations.

The SSL transport layer is supported by OpenSSL(called by Net::SSLeay). 
Check the version of Net::SSLeay and the OpenSSL version it is compiled 
against/with.

If you want to have all OpenSSL (IMHO the latest version) features 
available, you must download the latest Net::SSLeay source and compile it 
using the latest OpenSSL header files and libraries.

For nix systems this is easy.

For windows systems I recommend the latest strawberry perl (full featured 
download available at SF). If you use any Active-Perl, you need to install 
MinGW. Keep the PATH used for assp free from different installations of 

libeay32.dll
libssl32.dll
ssleay32.dll


Thomas





Von:    Grayhat <gray...@gmx.net>
An:     assp-test@lists.sourceforge.net
Datum:  22.12.2014 11:41
Betreff:        [Assp-test] Question about TLS




First of all, the config; ASSP SSL is configured as follows

DoTLS = do TLS
SSL_version = TLSv1
SSL_cipher_list = HIGH:!LOW:@STRENGTH

so basically the SSL configuration isn't so strict (for the sake of
testing I left the cipher list quite relaxed); now the problem: using
openssl I tested the ASSP as follows:

openssl s_client -connect my.assp.xyz:25

openssl s_client -starttls smtp -connect my.assp.xyz:25

both the above work without problems, they report that the connection
is encrypted and that the used protocol is TLSv1... but then, if I try
the following

openssl s_client -starttls smtp -tls1_1 -connect my.assp.xyz:25

openssl s_client -starttls smtp -tls1_2 -connect my.assp.xyz:25

in both cases the result is a failure; now... why is ASSP only
supporting TLSv1 and not 1.1 and 1.2 ?







------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk

_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to