Displaying 3 results from an estimated 3 matches for "aescbc".
Did you mean:
aacbc
2019 Apr 17
2
Problem with mysql backend and SSL ciphers
2019 Apr 18
1
Problem with mysql backend and SSL ciphers
.../ Poly and AES GCM are TLS 1.2 + only ciphers.
>
> This will not include AES CBC which exist with variations in both 1.0
> to 1.2, but if you're security conscious, you probably don't want to
> use CBC anyway.
>
> Or you could match just 1.2 versions with - I think -
> AESCBC+SHA384:AESCBC+SHA256. This will leave out AES CBC SHA1 which
> are in 1.0 - 1.1.
>
> And now Aki can correct me :)
>
> -- K
>
All I'm going to say is that this is 100% mysql/mariadb issue.
Aki
-------------- next part --------------
An HTML attachment was scrubbed...
URL: &...
2019 Apr 17
0
Problem with mysql backend and SSL ciphers
...HE+CHACHA20:kECDHE+AESGCM
ChaCha / Poly and AES GCM are TLS 1.2 + only ciphers.
This will not include AES CBC which exist with variations in both 1.0 to 1.2, but if you're security conscious, you probably don't want to use CBC anyway.
Or you could match just 1.2 versions with - I think - AESCBC+SHA384:AESCBC+SHA256. This will leave out AES CBC SHA1 which are in 1.0 - 1.1.
And now Aki can correct me :)
-- K
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://dovecot.org/pipermail/dovecot/attachments/20190417/fbd75c5e/attachment.html>