Well that's unfortunate for such a great tool.
________________________________ From: John Drescher <[email protected]> Sent: Saturday, November 19, 2016 9:18 PM To: Michael Cc: [email protected] Subject: Re: [Smbldap-tools-tech] Support for TLS 1.1 & 1.2 It's been years since I have seen any type of discussion here. John On Sat, Nov 19, 2016 at 7:56 PM, Michael <[email protected]> wrote: > Does anyone still monitor/read this list and respond to technical issues? > > > > ________________________________ > From: Michael <[email protected]> > Sent: Tuesday, November 15, 2016 11:45 AM > To: [email protected] > Subject: Re: Support for TLS 1.1 & 1.2 > > > It's also worth noting I tried the latest package from the link below..Same > issue. > > > http://download.gna.org/smbldap-tools/packages/el7/ > > > smbldap-tools-0.9.11-1.el7.centos.noarch > > > ________________________________ > From: Smbldap-tools-tech <[email protected]> on behalf of > Michael <[email protected]> > Sent: Tuesday, November 15, 2016 11:15 AM > To: [email protected] > Subject: [Smbldap-tools-tech] Support for TLS 1.1 & 1.2 > > > Hello - > > > It appears that the latest version of smbldap-tools does not support > versions of TLS past 1.0. > > > smbldap-tools-0.9.10-6.el7.noarch > > > If I set the minimum protocol to TLS v 1.1 on my LDAP server I get the > following error. > > > [root@ldap7 ~]# smbldap-passwd testuser > Cannot start TLS on LDAP connection: ldap://ldap7.testlott.lott:389: SSL > connect attempt failed with unknown error error:1408F10B:SSL > routines:SSL3_GET_RECORD:wrong version number. > > > If i change the minimum TLS protocol version to 1.0 on my LDAP server, > smbldap-tools works as expected again. > > As you know, TLS 1.0 has many shortcomings and thus we need support for the > later versions of TLS. > > > Thank you in advance. > > > - Mike > > > _______________________________________________ > Smbldap-tools-tech mailing list > [email protected] > https://mail.gna.org/listinfo/smbldap-tools-tech > -- John M. Drescher
_______________________________________________ Smbldap-tools-tech mailing list [email protected] https://mail.gna.org/listinfo/smbldap-tools-tech
