Our (temporary) solution:
https://medium.com/@andrewhowdencom/mysterious-ssl-tls-network-connection-fa ilures-in-debian-buster-52c29a661cb3 or: https://stackoverflow.com/questions/53058362/openssl-v1-1-1-ssl-choose-clien t-version-unsupported-protocol Happy New Year! Jiri Lorman Datac spol. S r. o. From: Jiri Lorman via Assp-user <assp-user@lists.sourceforge.net> Sent: Tuesday, December 31, 2019 6:34 AM To: 'For Users of ASSP' <assp-user@lists.sourceforge.net> Cc: lor...@datac.cz Subject: [Assp-user] FW: unsupported protocol?? I add, that SSL_version of the our assp is: SSLv23:!SSLv3:!SSLv2 but openssl.cnf of the debian/buster (openssl version 1.1.1.) sets: [system_default_sect] MinProtocol = TLSv1.2 CipherString = DEFAULT@SECLEVEL=2 It follows that assp accepts from client side only TLS 1.2 as minimum? Jiri Lorman Datac spol. S r. o. From: Jiri Lorman via Assp-user <assp-user@lists.sourceforge.net <mailto:assp-user@lists.sourceforge.net> > Sent: Monday, December 30, 2019 2:07 PM To: 'For Users of ASSP' <assp-user@lists.sourceforge.net <mailto:assp-user@lists.sourceforge.net> > Cc: lor...@datac.cz <mailto:lor...@datac.cz> Subject: [Assp-user] unsupported protocol?? Hello Thomas, our assp ver. 2.6.3, 19169 After upgrade OS debian from stretch to buster shows for some clients out maillog: Dec-30-19 13:51:27 Error: Worker_4 accept_SSL to client ::ffff:86.49.64.79 faild IO::Socket::SSL=GLOB(0x5568c1611da0) (timeout: 5 s) : SSL accept attempt faild error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported potocol Dec-30-19 13:52:17 Error: Worker_1 accept_SSL to client ::ffff:86.49.64.79 faild IO::Socket::SSL=GLOB(0x7fa3d79cd980) (timeout: 5 s) : SSL accept attempt faild error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported potocol Dec-30-19 13:53:56 Error: Worker_1 accept_SSL to client ::ffff:86.49.64.79 failed IO::Socket::SSL=GLOB(0x7fa3d63fb7e0) (timeout: 5 s) : SSL accept attempt failed error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol And connection is impossible, remote ports: 25, 465, 587. Please, where is problem? Thank you very much Jiri Lorman Datac spol. S r. o.
_______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
_______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
_______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user