Our (temporary) solution:

https://medium.com/@andrewhowdencom/mysterious-ssl-tls-network-connection-fa
ilures-in-debian-buster-52c29a661cb3

or:

https://stackoverflow.com/questions/53058362/openssl-v1-1-1-ssl-choose-clien
t-version-unsupported-protocol

 

Happy New Year!

 

Jiri Lorman

Datac spol. S r. o.

 

 

 

From: Jiri Lorman via Assp-user <assp-user@lists.sourceforge.net> 
Sent: Tuesday, December 31, 2019 6:34 AM
To: 'For Users of ASSP' <assp-user@lists.sourceforge.net>
Cc: lor...@datac.cz
Subject: [Assp-user] FW: unsupported protocol??

 

I add, that SSL_version of  the our assp is:  SSLv23:!SSLv3:!SSLv2
but openssl.cnf  of the debian/buster (openssl version 1.1.1.)  sets:
[system_default_sect]

MinProtocol = TLSv1.2

CipherString = DEFAULT@SECLEVEL=2

 

It follows that assp accepts from client side only TLS 1.2 as minimum?

 

Jiri Lorman

Datac spol. S r. o.

 

From: Jiri Lorman via Assp-user <assp-user@lists.sourceforge.net
<mailto:assp-user@lists.sourceforge.net> > 
Sent: Monday, December 30, 2019 2:07 PM
To: 'For Users of ASSP' <assp-user@lists.sourceforge.net
<mailto:assp-user@lists.sourceforge.net> >
Cc: lor...@datac.cz <mailto:lor...@datac.cz> 
Subject: [Assp-user] unsupported protocol??

 

Hello Thomas,

our assp ver. 2.6.3,  19169

After upgrade OS debian from stretch to buster shows for some clients out
maillog:

 

Dec-30-19 13:51:27 Error: Worker_4 accept_SSL to client ::ffff:86.49.64.79
faild IO::Socket::SSL=GLOB(0x5568c1611da0) (timeout: 5 s) : SSL accept
attempt faild error:14209102:SSL
routines:tls_early_post_process_client_hello:unsupported potocol

Dec-30-19 13:52:17 Error: Worker_1 accept_SSL to client ::ffff:86.49.64.79
faild IO::Socket::SSL=GLOB(0x7fa3d79cd980) (timeout: 5 s) : SSL accept
attempt faild error:14209102:SSL
routines:tls_early_post_process_client_hello:unsupported potocol

Dec-30-19 13:53:56 Error: Worker_1 accept_SSL to client ::ffff:86.49.64.79
failed IO::Socket::SSL=GLOB(0x7fa3d63fb7e0) (timeout: 5 s) : SSL accept
attempt failed error:14209102:SSL
routines:tls_early_post_process_client_hello:unsupported protocol

 

And connection is impossible, remote ports: 25, 465, 587.

 

Please, where is problem?

Thank you very much

 

Jiri Lorman

Datac spol. S r. o.

 

 

 

_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to