Re: [openssl-users] openssl client v1.1.0 can not connect: handshake failure:ssl/record/rec_layer_s3.c:1385:SSL alert number 40

2017-02-17 Thread Matthias Apitz
El día Friday, February 17, 2017 a las 09:57:39AM +, Matt Caswell escribió: > > > On 17/02/17 07:46, Matthias Apitz wrote: > > New, TLSv1/SSLv3, Cipher is DHE-DSS-AES128-GCM-SHA256 > > Your server appears to be configured with a DSA certificate. > > OpenSSL 1.1.0 made changes to the

Re: [openssl-users] openssl client v1.1.0 can not connect: handshake failure:ssl/record/rec_layer_s3.c:1385:SSL alert number 40

2017-02-17 Thread Matt Caswell
On 17/02/17 07:46, Matthias Apitz wrote: > New, TLSv1/SSLv3, Cipher is DHE-DSS-AES128-GCM-SHA256 Your server appears to be configured with a DSA certificate. OpenSSL 1.1.0 made changes to the default ciphersuites that get sent. See this CHANGES entry: *) Changes to the DEFAULT cipherlist:

[openssl-users] openssl client v1.1.0 can not connect: handshake failure:ssl/record/rec_layer_s3.c:1385:SSL alert number 40

2017-02-17 Thread Matthias Apitz
Hello, We run a SSL client/server application, where the server is written in Java using jdk1.8.0_31 and the client is written in C. We prepare the update to OpenSSL 1.1.0 for the C client and are facing the problem, that not even the OpenSSL s_client can now connect to our server. It says: