Re: enforce TLS 1.2 in OpenLDAP server side

[Quanah Gibson-Mount]

--On Saturday, September 10, 2016 10:57 AM +0200 Dieter Klünter 
<die...@dkluenter.de> wrote:

However, TLS1.0 still shows up in a lot of tcpdump packets:

Is this compiled with GnuTLS or OpenSSL?

Since it is ".el6" that would generally imply a RHEL build.  That would in 
turn mean it is most likely compiled against the known insecure and broken 
MozNSS libs.  So neither GnuTLS or OpenSSL.

--Quanah

--

Quanah Gibson-Mount