Re: cyrus 2.4.17 TLS woes

2015-01-15 Thread Patrick Goetz
On 01/15/2015 10:04 AM, Wolfgang Breyha wrote: > Maybe > https://bettercrypto.org/ > is of help. > Thanks for both writing and sharing that document. Unfortunately it only has this to say about cyrus-imap: - Limiting the ciphers provided may force

Re: cyrus 2.4.17 TLS woes

2015-01-15 Thread Wolfgang Breyha
Patrick Goetz wrote on 15/01/15 13:34: > Does anyone have a secure, functional cipher list entry they'd like to > share? Maybe https://bettercrypto.org/ is of help. This document includes not only cyrus-imapd. Greetings, Wolfgang -- Wolfgang Breyha | http://www.blafasel.at/ Vienna University

Re: cyrus 2.4.17 TLS woes

2015-01-15 Thread Marty Lee
> On 15 Jan 2015, at 12:34, Patrick Goetz wrote: > > Does anyone have a secure, functional cipher list entry they'd like to > share? I’m using the following on 2.4.17-caldav-b10 tls_cipher_list:TLSv1+HIGH:!aNull:@STRENGTH Functional yes; I won’t make any promises about secure,

cyrus 2.4.17 TLS woes

2015-01-15 Thread Patrick Goetz
So, perhaps unsurprisingly, TLS is giving me problems. I'm trying to enforce allowplaintext: no and am running into some issues with ciphers. I started with this cipher list: tls_cipher_list: TLSv1.2+HIGH:!aNULL:@STRENGTH and got this error: no shared cipher in SSL_accept() -> fail