warning: TLS library problem

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

warning: TLS library problem

lists@lazygranch.com
postfix/smtpd[14755]: warning: TLS library problem: error:140760FC:SSL
routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640:

Should I be blocking some encryption method? I thought openssl dropped
support for the hackable protocols.


Reply | Threaded
Open this post in threaded view
|

Re: warning: TLS library problem

Viktor Dukhovni


> On Jan 24, 2018, at 9:25 PM, [hidden email] wrote:
>
> postfix/smtpd[14755]: warning: TLS library problem: error:140760FC:SSL
> routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640:
>
> Should I be blocking some encryption method? I thought openssl dropped
> support for the hackable protocols.

The error message is not what it appears.  The SSLv23 functions are the
generic layer that handles all protocol versions before the actual protocol
is determined.

--
        Viktor.

Reply | Threaded
Open this post in threaded view
|

Re: warning: TLS library problem

Matus UHLAR - fantomas
>> On Jan 24, 2018, at 9:25 PM, [hidden email] wrote:
>>
>> postfix/smtpd[14755]: warning: TLS library problem: error:140760FC:SSL
>> routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640:
>>
>> Should I be blocking some encryption method? I thought openssl dropped
>> support for the hackable protocols.

On 24.01.18 22:41, Viktor Dukhovni wrote:
>The error message is not what it appears.  The SSLv23 functions are the
>generic layer that handles all protocol versions before the actual protocol
>is determined.

for example, dropping connection or speaking plaintest to it can result in
this kind of error.

--
Matus UHLAR - fantomas, [hidden email] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"They say when you play that M$ CD backward you can hear satanic messages."
"That's nothing. If you play it forward it will install Windows."