[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-11-09 Thread Jan Henke
I found the solution by chance, the directive to configure the supported algorithms and TLS versions must be inside a directive it seems and cannot be file global. ** Changed in: openssl (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubu

[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-11-09 Thread Jan Henke
Is there anything I can do to solve this problem? It still exists and prevents normal usage for my wife's mobile phone. From all I can tell it is not related to the configuration, as I am using the Mozilla recommended Intermediate configuration. -- You received this bug notification because you a

[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-10-28 Thread Jan Henke
I am already using the recommended settings from Mozilla (Intermediate Compatibility), I am just trying to get it running with those, but with those settings as posted above, no TLSv1 and TLSv1.1 are offered to clients. -- You received this bug notification because you are a member of Ubuntu Bugs

[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-10-27 Thread Seth Arnold
It may be worth trying Mozilla's recommendations for e.g. Intermediate Compatibility if you need some clients with older crypto toolkits to be able to connect: https://mozilla.github.io/server-side-tls/ssl-config-generator/ Thanks -- You received this bug notification because you are a member o

[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-10-24 Thread Jan Henke
Even with commenting out all mod_ssl settings for that site, except the path to the certificate and key files, the server does not offer any more ciphers. https://www.ssllabs.com/ssltest/analyze.html?d=www.taujhe.de&s=2a04%3ace40%3a100%3ada%3a0%3a0%3a101%3a4&latest -- You received this bug notif

[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-10-24 Thread Jan Henke
The server configuration is included at the end of my last post (you have to click the "read more"). ** Changed in: openssl (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchp

[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-10-24 Thread Marc Deslauriers
Could you try with the default configuration? I doesn't look like your server is properly offering the ciphers you've specified in the configuration: https://www.ssllabs.com/ssltest/analyze.html?d=www.taujhe.de&s=62.112.43.237 -- You received this bug notification because you are a member of Ubu

[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-10-24 Thread Marc Deslauriers
OpenSSL in Ubuntu 16.04 LTS does include support for TLSv1 and TLSv1.1: $ openssl s_client -connect www.ubuntu.com:443 -tls1 CONNECTED(0003) New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-SHA Protocol : TLSv1 Cipher: ECDHE-RSA-AES128-SHA $ openssl s_client -connect www.ubuntu.co

[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-10-24 Thread Jan Henke
Your comment above omits the interesting parts, since the core problem is that for TLSv1 and TLSv1.1 the server and client cannot negotiate any ciphers, thus while connected, the TLS handshake actually fails. openssl s_client -connect www.taujhe.de:443 -tls1

[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-10-24 Thread Jan Henke
** Changed in: openssl (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1636124 Title: openssl lacks support for TLSv1 and TLSv1.1 To manage notifications abo

[Bug 1636124] Re: openssl lacks support for TLSv1 and TLSv1.1

2016-10-24 Thread ChristianEhrhardt
Hi, thank you for your report and helping to make Ubuntu better. it might be totally true that some issue affects the connectivity of some browsers - like the one of the cellphone you mentioned. But I'd question the test you used in regard to TLSv1 support. But IIRC that list just means that by d