Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Mark Felder
On Thu, May 14, 2015, at 10:20, Patrick Proniewski wrote: > On 14 mai 2015, at 16:13, jungle Boogie wrote: > > > On 14 May 2015 at 06:08, Mark Felder wrote: > >> > >> TLS 1.0 is dead and is even now banned in new installations according to > >> the PCI DSS 3.1 standards. Nobody should expect T

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Charles Swiger
On May 14, 2015, at 8:24 AM, Karl Denninger wrote: > [ ... ] > I'd love to lock out TLS 1.0 but if you do that anyone still running > anything that uses XP cannot connect. True for WinXP + IE6: https://www.ssllabs.com/ssltest/viewClient.html?name=IE&version=6&platform=XP However, large finan

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Karl Denninger
On 5/14/2015 10:20, Patrick Proniewski wrote: > On 14 mai 2015, at 16:13, jungle Boogie wrote: > >> On 14 May 2015 at 06:08, Mark Felder wrote: >>> TLS 1.0 is dead and is even now banned in new installations according to >>> the PCI DSS 3.1 standards. Nobody should expect TLS 1.0 to be supported >

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Adam Major
Hello >> But I don't think disable TLS 1.0 is ok. >> > > TLS 1.0 is dead and is even now banned in new installations according to > the PCI DSS 3.1 standards. Nobody should expect TLS 1.0 to be supported > by *any* HTTPS site now. Maybe is dead but is used in many old browser / software still us

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Patrick Proniewski
On 14 mai 2015, at 16:13, jungle Boogie wrote: > On 14 May 2015 at 06:08, Mark Felder wrote: >> >> TLS 1.0 is dead and is even now banned in new installations according to >> the PCI DSS 3.1 standards. Nobody should expect TLS 1.0 to be supported >> by *any* HTTPS site now. > > > Here, here! W

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread jungle Boogie
On 14 May 2015 at 06:08, Mark Felder wrote: > > > On Thu, May 14, 2015, at 05:19, Adam Major wrote: >> Hello >> >> I checked now by sslLabs.com: >> https://www.ssllabs.com/ssltest/analyze.html?d=forums.freebsd.org >> >> and score is A+ >> >> But I don't think disable TLS 1.0 is ok. >> > > TLS 1.0

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Mark Felder
On Thu, May 14, 2015, at 05:19, Adam Major wrote: > Hello > > I checked now by sslLabs.com: > https://www.ssllabs.com/ssltest/analyze.html?d=forums.freebsd.org > > and score is A+ > > But I don't think disable TLS 1.0 is ok. > TLS 1.0 is dead and is even now banned in new installations accor

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Dan Lukes
Patrick Proniewski wrote: >> "Data Transfer Interrupted >> The connection to forums.freebsd.org has terminated unexpectedly. Some >> data may have been transferred." > > looks like your browser/OS does not support TLS 1.2. I'm confused by FreeBSD policy, a lot. Base OpenSSL in still supported r

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Ian Smith
On Thu, 14 May 2015 12:19:55 +0200, Adam Major wrote: > Hello > > I checked now by sslLabs.com: > https://www.ssllabs.com/ssltest/analyze.html?d=forums.freebsd.org > > and score is A+ Ah, so it is now .. it was still B only half an hour ago :) > But I don't think disable TLS 1.0 is ok.

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Patrick Proniewski
On 14 mai 2015, at 12:02, Ian Smith wrote: > Well, I can't reach https://forums.freebsd.org/ at all at the moment, my > (admittedly ancient, on 8.2) SeaMonkey now consistenly reports: > > "Data Transfer Interrupted > The connection to forums.freebsd.org has terminated unexpectedly. Some > data

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Adam Major
Hello I checked now by sslLabs.com: https://www.ssllabs.com/ssltest/analyze.html?d=forums.freebsd.org and score is A+ But I don't think disable TLS 1.0 is ok. In test result paragraph: Handshake Simulation is informations that page will not work on: - Android 4.3 (and older) - IE 6,7,8 on XP/Vi

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Ian Smith
On Thu, 14 May 2015 10:28:27 +0200, Patrick Proniewski wrote: > On 13 mai 2015, at 23:18, Anders Gulden Olstad wrote: > > > Qualys report chain issues > > that's pretty odd, because I've checked too just after sending my > reply to the list (message id > a2d58ccb-8b0a-40ff-9ed1-89b698a83

Re: Forums.FreeBSD.org - SSL Issue?

2015-05-14 Thread Patrick Proniewski
On 13 mai 2015, at 23:18, Anders Gulden Olstad wrote: > Qualys report chain issues that's pretty odd, because I've checked too just after sending my reply to the list (message id a2d58ccb-8b0a-40ff-9ed1-89b698a83...@patpro.net), and Qualys reported no issues at all about the chain. That was abo