Re: TLS1.0 and 1.1 with Cyrus (Debian Buster)

2020-05-09 Thread Roman Medina-Heigl Hernandez
Wow, it works! Thank you! " Has server cipher order? yes (OK) -- TLS 1.3 and below" Cheers, -r El 09/05/2020 a las 21:53, Jonas Andradas escribió: > Hi Roman, > > Did you try with the following in imapd.conf? > > |tls_prefer_server_ciphers: 1| > > Regards, > Jonas. > > On Sat, 9 May 2020, 0

Re: TLS1.0 and 1.1 with Cyrus (Debian Buster)

2020-05-09 Thread Jonas Andradas
Hi Roman, Did you try with the following in imapd.conf? tls_prefer_server_ciphers: 1 Regards, Jonas. On Sat, 9 May 2020, 01:22 Roman Medina-Heigl Hernandez, wrote: > Gracias Alberto. Now it's solved (it has been a little bit tricky). > > My final config: > > * /etc/imapd.conf > tls_ciphers:

Re: TLS1.0 and 1.1 with Cyrus (Debian Buster)

2020-05-08 Thread Roman Medina-Heigl Hernandez
Gracias Alberto. Now it's solved (it has been a little bit tricky). My final config: * /etc/imapd.conf tls_ciphers: TLSv1.2:TLSv1:HIGH:!aNULL:@STRENGTH tls_versions: tls1_0 tls1_1 tls1_2 tls1_3 * /etc/ssl/openssl.cnf MinProtocol = TLSv1.0 CipherString = DEFAULT@SECLEVEL=2 Still don't know how t

Re: TLS1.0 and 1.1 with Cyrus (Debian Buster)

2020-05-08 Thread Alberto Gonzalez Iniesta
Hi, It's probably due to new defaults in libssl. Try adding: MinProtocol = None CipherString = DEFAULT To: /etc/ssl/openssl.cnf Regards, Alberto On Fri, May 08, 2020 at 09:07:31PM +0200, Roman Medina-Heigl Hernandez wrote: > Hi, > > I upgraded from Jessie to Buster (thru Stretch) and noticed t