[ Date Index ]
[ Thread Index ]
[ <= Previous by date /
thread ]
[ Next by date /
thread => ]
[LUG] Disabling SSLv3 everywhere
- To: list@xxxxxxxxxxxxx
- Subject: [LUG] Disabling SSLv3 everywhere
- From: Simon Waters <simon@xxxxxxxxxxxxxx>
- Date: Wed, 15 Oct 2014 02:24:38 +0100
- Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dcglug.org.uk; s=1412586362; h=Sender:Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post:List-Unsubscribe:List-Id:Reply-To:Subject:To:MIME-Version:From:Date:Message-ID; bh=edxpHS+ZG49ST0CVdZuDyXKjZv/FSoLsuEWRnI46R8w=; b=h41iZTrj8x0DsTJWKLtUPD+4LrFzzz1BA+0Pku5TxG/wSP1E/YMfSjouEt+byoCygWVTyCIT7NHH99UeDZ4eWPKbyh7UsvL+Lc/vzz1su5b9Fy+Up+/yW+kR39+8Q/Xmu30Wxgc4D/tqU4wUQJ/cE56ArOsOXggZLGRdfoCWhgY=;
- Openpgp: id=8F455606
Okay, Google they say we should lose SSLv3 ASAP.
So far everything everywhere has gone to TLSv1 or better except...
I have dovecot on Squeeze, and as soon as I disable SSLv3 it says it
can't get a cipher list together.
I have stunnel working with TLSv1, so I can use than for POP3S and
IMAP4S, but should dovecot in Squeeze work with TLSv1.
I can't decipher the complexities of the build, but my suspicion is
"no". Which is a blow for Squeeze support (okay I should have upgraded
by now).
--
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq