Fedora 34, One of the involved algorithms has insufficient security level
Philip Schaten <[email protected]> Sat, 15 May 2021 17:42:05 +0200
| Newsgroups | gmane.network.gnutls.general |
|---|---|
| Message-ID | <[email protected]> |
Hi! After an upgrade to Fedora 34, gnutls-cli gives me a `*** Fatal error: One of the involved algorithms has insufficient security level.` when connecting to my university mail server. With `gnutls-cli --allow-broken`, connection works and I get this result `- Description: (TLS1.2-X.509)-(ECDHE-SECP256R1)-(RSA-SHA1)- (AES-128-CBC)-(SHA1)`. Using `gnutls-cli -l` I can see that SHA1 in combination with tls1.2 seems to be forbidden. Also, `gnutls-cli-debug` tells me it needs to disable TLS1.2 (why is this?). Might this be the reason for the error/is there a way to find out? Is it a bug in gnutls or misconfiguration in the university mail server? Thanks a lot. Best Philip P.S.: gnutls-cli 3.7.1