Troubles with SSL ciphers
Klaus Ethgen via Exim-users <[email protected]> Sun, 5 Jul 2026 12:02:25 +0100
| Newsgroups | gmane.mail.exim.user |
|---|---|
| Message-ID | <ako5wTY2t7N_A8N4@chil> |
--===============2466207065128414014== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="OpALCKBI2I2L7uC1" Content-Disposition: inline --OpALCKBI2I2L7uC1 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, another trouble I had when updating was with the ciphers. =46rom https://configurator.tlsref.org/ I get the following[0]: openssl_options =3D +no_sslv2 +no_sslv3 +no_tlsv1 +no_tlsv1_1 tls_eccurve =3D X25519MLKEM768:X25519:prime256v1:secp384r1 tls_require_ciphers =3D ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-= SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDS= A-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305 unfortunately, the tls_eccurve option is not working and produces errors due to X25519MLKEM768. On much lower version on devuan os that settings was working. But I think, devuan uses gnutls instead of openssl. On gentoo, gnutls is incompatible with dane so that is not an option. Any idea what happened to that option? Regards Klaus [0] https://configurator.tlsref.org/#server=3Dexim&version=3D4.99.4&config= =3Dintermediate&openssl=3D3.5.7&guideline=3D6.0 --=20 Klaus Ethgen http://www.ethgen.ch/ pub 4096R/4E20AF1C 2011-05-16 Klaus Ethgen <[email protected]> Fingerprint: 85D4 CA42 952C 949B 1753 62B3 79D0 B06F 4E20 AF1C --OpALCKBI2I2L7uC1 Content-Type: application/pgp-signature; name=signature.asc -----BEGIN PGP SIGNATURE----- Comment: Charset: ISO-8859-1 iQHPBAABCgA5FiEE2oNkebTd5YKFiBG5fue2cNoeGfgFAmpKOZUbFIAAAAAABAAO bWFudTIsMi41KzEuMTIsMiwyAAoJEH7ntnDaHhn4gfoMAI08gevwcl9zMQ4r7ZfM gr8Zjp9NtEf8iths9WcMmqpWDB2uvliltfA4kcvyXA93GoMtFqxSyV5UPmQZhHQg 8u5F2x9U2ivTUKseIILXf5Xb8dD/RqmBpac9TI9zyAmZxgwtbUrR9DLDVqblhk+w bhgv3mKBhFFj1hxwv9HbZ4euUMaWanWym4yts/8x/KW9tX6AfLM48pgAfgHGLXQg DFevyhyCPQA9Aopx1T7pcHs2Bt/ygdoUl954/EjH6u6okaoeVTyxVkndEoDRibGb 5T20lzj8xCYbstxKgw4SrB1bwh5ywQmvavV8WZoRHc8OqAY5FkPqyfdMZoUZyeqF taEoXq7Cfa2thLS0Pe5RLQ5LGu8iUN4eykmUBpxbmtxDaGFp5b4aSLUXlF7WspvA NhbUNQF0sEnr/5pdS9NvQ9z+5Txjrk4Z/v56jXEUrLMOSJ7fTO3huwWGHoW3sXSf PKsNsaB4AO/GW8BYq5ITmzotAI9ckqg9jQbbMcxaU/nl3g== =PTA/ -----END PGP SIGNATURE----- --OpALCKBI2I2L7uC1-- --===============2466207065128414014== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## [email protected] ## Exim details at https://www.exim.org/ ## Please use the Wiki with this list - https://code.exim.org/exim/wiki/wiki --===============2466207065128414014==--