Re: SSL 3.0 and older ciphers selected in applications
On Mon, Dec 08, 2014 at 02:35:00PM +0100, Daniel Pocock wrote:
>
> I have no idea what technology is in use in the remote/client system.
>
> If my server socket is using TLSv1_method it is rejecting the connection
> and logging those errors on my server:
>
> error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
> Error code = 336130315 file=s3_pkt.c line=348
>
> My server then sends TCP RST to the client
So I can actually reproduce this with the s_client from squeeze,
since that still generates an SSLv2 compatible client hello. That
does fail talking to any server using the TLSv1 method but
works talking to the SSLv23 method. Since I'm actually going to
remove support for the TLSv1 method I don't intend to fix this.
Kurt
Reply to: