Does anyone still monitor/read this list and respond to technical issues?

________________________________
From: Michael <[email protected]>
Sent: Tuesday, November 15, 2016 11:45 AM
To: [email protected]
Subject: Re: Support for TLS 1.1 & 1.2


It's also worth noting I tried the latest package from the link below..Same 
issue.


http://download.gna.org/smbldap-tools/packages/el7/


smbldap-tools-0.9.11-1.el7.centos.noarch

________________________________
From: Smbldap-tools-tech <[email protected]> on behalf of 
Michael <[email protected]>
Sent: Tuesday, November 15, 2016 11:15 AM
To: [email protected]
Subject: [Smbldap-tools-tech] Support for TLS 1.1 & 1.2


Hello -


It appears that the latest version of smbldap-tools does not support versions 
of TLS past 1.0.


smbldap-tools-0.9.10-6.el7.noarch


If I set the minimum protocol to TLS v 1.1 on my LDAP server I get the 
following error.


[root@ldap7 ~]# smbldap-passwd testuser
Cannot start TLS on LDAP connection: ldap://ldap7.testlott.lott:389: SSL 
connect attempt failed with unknown error error:1408F10B:SSL 
routines:SSL3_GET_RECORD:wrong version number.


If i change the minimum TLS protocol version to 1.0 on my LDAP server, 
smbldap-tools works as expected again.


As you know, TLS 1.0 has many shortcomings and thus we need support for the 
later versions of TLS.


Thank you in advance.


- Mike
_______________________________________________
Smbldap-tools-tech mailing list
[email protected]
https://mail.gna.org/listinfo/smbldap-tools-tech

Reply via email to