Hello Alexander,

On Wednesday, July 10, 2002 at 9:01:07 PM you wrote in
mid:[EMAIL PROTECTED] (at least in part):

AL> I think - weak cipher

Could you define this more precisely? I know I've read something about it
on list already, but I can't find it anymore and AFAIR it wasn't very
detailed.

It just ... at home (LAN) and at our main mail server I'm running SSL-POP3
by stunnel and it gives back (when connecting w/ openssl)

"New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA"

'neo.pl' gives back

New, TLSv1/SSLv3, Cipher is EDH-RSA-DES-CBC3-SHA

So 'DES', 'CBC3' and 'SHA' are present too, just additional stuff.
I've set up a test account, using 'neo.pl' and imported cert like I already
did with mine. I don't have an account there, but if I were come to
'authorization failed' everything would be fine ... but I didn't.

Classical error message in log file:

,-----= [  ] =-----
|  11.07.2002, 15:20:45: FETCH - TLS handshake complete
| !11.07.2002, 15:20:45: FETCH - Server reports error. The response is: 
`-----=

So ... could anybody with knowledge about TLS/SSL implementation of TB!
make a statement what could be set up wrong? Or maybe what could be wrong
in implementation? Or what to test else if anything already known fails?

Seems the whole 'encryption stuff' is handled a little bit like as
stepchild; on June 25th I reported a (IMHO _serious_) bug about
MS-CryptoAPI function (bug id: #986 [1]) and it's still 'New', not even
confirmed, neither 'Assigned to' .... :-(

[1] https://www.ritlabs.com/bt/view_bug_advanced_page.php?f_id=0000986
-- 
Regards
Peter Palmreuther                            mailto:[EMAIL PROTECTED]
(The Bat! v1.61 on Windows 2000 5.0 Build 2195 Service Pack 2)

Purring (adj). Sound of a cat manufacturing cuteness.


_________________________________________________________
Archives   : http://tbbeta.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
Unsubscribe: mailto:[EMAIL PROTECTED]
Bugs/Wishes: https://www.ritlabs.com/bt/

Reply via email to