Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #186474

Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 )

Show all headers | View raw

On 5 September 2017 at 19:15, Gene Heskett <gheskett@shentel.net> wrote:
> On Tuesday 05 September 2017 13:40:00 Michael Grant wrote:
>
>> I upgraded openssl today in my server running testing.  It installed
>> version 1.1.0f-5.  To my surprise, my mac clients can no longer send
>> and receive email!
>>
> As that is a security related upgrade, I would next push the Mac people
> to match it, or if possible, configure the Macs to use the more secure
> protocol.

Any clues how to configure the Mac to use the more secure protocol?
All the software is up-to-date on the Mac side.  I don't see any
obvious option in any of the mail settings on the Mac side.

This is the error I see in the mail logs for both dovecot and sendmail:

dovecot:
TLS handshaking: SSL_accept() failed: error:1417D102:SSL
routines:tls_process_client_hello:unsupported protocol, session=<...>

sendmail:
STARTTLS=server: 0:error:1417D102:SSL
routines:tls_process_client_hello:unsupported
protocol:../ssl/statem/statem_srvr.c:974:

I realize this isn't a MacOS forum but the error message here is on
the Debian side.  Other mail clients like Windows Mail connect fine.

Is there something I can set on Debian side to force this newer
openssl to accept older 1.x connections?

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) songbird <songbird@anthive.com> - 2017-08-14 14:10 +0200
  Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Stephan Seitz <stse+debian@fsing.rootsland.net> - 2017-08-14 15:20 +0200
    Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) kjonca@poczta.onet.pl (Kamil Jońca) - 2017-08-14 21:50 +0200
      Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-08-14 22:50 +0200
        Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) kjonca@poczta.onet.pl (Kamil Jońca) - 2017-08-15 09:30 +0200
    Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) songbird <songbird@anthive.com> - 2017-08-15 15:10 +0200
      Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-05 19:50 +0200
        Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Gene Heskett <gheskett@shentel.net> - 2017-09-05 20:20 +0200
          Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-05 21:40 +0200
            Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-05 23:50 +0200
              Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-09-06 11:10 +0200
            Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-09-05 23:50 +0200
              Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-06 00:10 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) songbird <songbird@anthive.com> - 2017-09-06 02:50 +0200
              Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) <tomas@tuxteam.de> - 2017-09-06 10:00 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Reco <recoverym4n@gmail.com> - 2017-09-06 17:10 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) <tomas@tuxteam.de> - 2017-09-06 21:00 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Reco <recoverym4n@gmail.com> - 2017-09-07 16:30 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-08 00:00 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Reco <recoverym4n@gmail.com> - 2017-09-08 09:10 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-09-08 09:50 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Michael Grant <mgrant@grant.org> - 2017-09-08 11:30 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Reco <recoverym4n@gmail.com> - 2017-09-08 18:30 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-09-08 09:40 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Brian <ad44@cityscape.co.uk> - 2017-09-08 20:20 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) Sven Hartge <sven@svenhartge.de> - 2017-09-08 22:00 +0200
                Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 ) <tomas@tuxteam.de> - 2017-09-08 11:10 +0200

csiph-web