TLS cipher issues

Kurt Albershardt <[email protected]> Tue, 2 Aug 2016 13:53:13 -0600
Newsgroups gmane.mail.cgatepro.general
Message-ID <[email protected]>
Had a rash of these awhile back and thought we had quashed it, but they 
seem to have come back in the past few weeks.

Seeing these for aol.com and a few smaller domains:

11:54:14.288 3 SMTP-025876(aol.com) failed to establish a secure connection with [64.12.91.196]:25. Error Code=server TLS cipher method is not supported

13:45:27.360 3 SMTPI-061795(xyz.com) failed to accept a secure connection for DOMAIN(nv.net). Error Code=TLS version supported by client is too old

We've enabled CBC for old chiphers to no apparent effect.

I set TLS logging to 'all info' and see lots of detail for HTTPU and IMAP sessions, but those lines above do not appear to have nearby lines giving any detail.  Do the SMTP session numbers pertain to the TLS numbers?


thanks~


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to  <[email protected]>