Am 07.11.2014 um 16:00 schrieb Viktor Dukhovni: > > Was there a prior connection shortly before that where the handshake > failed for some other reason? No, there is no prior connection according to our logs, which is strange, now that you mention it.
> >> They use Kerio Connect 8.4.0 RC 1. According to Wikipedia (couldn't find >> any version information on their website): >> >> 8.3.4 OpenSSL library upgraded to version 1.0.1j to prevent MITM >> protocol downgrade to insecure SSL 3.0 protocol > > Perhaps 1.0.1j sometimes sends SCSV when it should not, I'll look > into it when I get a chance. > ------------------------------------------------------------------------------------------------ ------------------------------------------------------------------------------------------------ Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Dr. Karl Eugen Huthmacher Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt, Prof. Dr. Sebastian M. Schmidt ------------------------------------------------------------------------------------------------ ------------------------------------------------------------------------------------------------