On 11/26/18 12:08 PM, James B. Byrne via Info-cyrus wrote:
On Mon, November 26, 2018 10:28, Ken Murchison wrote:I can't reproduce your issue and I don't see where the sslscan output states that TLS1.0 is being advertised. Can you actually connect using TLS1.0 protocol?No, we cannot. I will pass the results of our test to the powers thast be and see what their reply is. Thank you, that was most helpful advice.
https://testssl.sh is also useful. testssl.sh --ssl-native -p <ip>:993 .... Service detected: IMAP, thus skipping HTTP specific checks Testing protocols via native opensslSSLv2 Local problem: /usr/bin/openssl doesn't support "s_client -ssl2"
SSLv3 not offered (OK) TLS 1 not offered TLS 1.1 not offered TLS 1.2 offered (OK) TLS 1.3 not offered NPN/SPDY not offered ALPN/HTTP2 not offered
<<attachment: boutilpj.vcf>>
---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
