On 11/26/18 12:08 PM, James B. Byrne via Info-cyrus wrote:
On Mon, November 26, 2018 10:28, Ken Murchison wrote:
I can't reproduce your issue and I don't see where the sslscan output
states that TLS1.0 is being advertised. Can you actually connect
using TLS1.0 protocol?
No, we cannot. I will pass the results of our test to the powers
thast be and see what their reply is.
Thank you, that was most helpful advice.
https://testssl.sh is also useful.
testssl.sh --ssl-native -p <ip>:993
....
Service detected: IMAP, thus skipping HTTP specific checks
Testing protocols via native openssl
SSLv2 Local problem: /usr/bin/openssl doesn't support "s_client
-ssl2"
SSLv3 not offered (OK)
TLS 1 not offered
TLS 1.1 not offered
TLS 1.2 offered (OK)
TLS 1.3 not offered
NPN/SPDY not offered
ALPN/HTTP2 not offered
begin:vcard
fn:Patrick Boutilier
n:Boutilier;Patrick
org:;Nova Scotia Department of Education
adr:;;2021 Brunswick Street;Halifax;NS;B3K 2Y5;Canada
email;internet:boutilpj@xxxxxxxxxxx
title:WAN Communications Specialist
tel;work:902-424-6800
tel;fax:902-424-0874
x-mozilla-html:FALSE
version:2.1
end:vcard
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
