Displaying 3 results from an estimated 3 matches for "eqr1ubyrwgb".
2015 Mar 20
2
imap-login SSLv3 causes signal 11, core dump and DoS. ssl_protocols = ??
...11:36:25 MAILHOST dovecot: [ID 583609 mail.info] imap-login:
Disconnected (disconnected before auth was ready, waited 0 secs):
user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept()
failed: error:14076102:SSL routines:SSL23_GET_CLIENT_HELLO:unsupported
protocol, session=<eqr1ubYRWgB/AAAB>
the "SSL23_GET_CLIENT_HELLO:unsupported protocol" seems to do what I
thought the ssl_protocols setting did.
Do I still need, if I ever needed, the "ssl_protocols = " setting?
James.
# dovecot -n
# 2.2.16: /etc/opt/XXXX/dovecot/dovecot.conf
# Pigeonhole version...
2015 Mar 20
0
imap-login SSLv3 causes signal 11, core dump and DoS. ssl_protocols = ??
...r 20 11:36:25 MAILHOST dovecot: [ID 583609 mail.info] imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14076102:SSL routines:SSL23_GET_CLIENT_HELLO:unsupported protocol, session=<eqr1ubYRWgB/AAAB>
>
>
>
> the "SSL23_GET_CLIENT_HELLO:unsupported protocol" seems to do what I thought the ssl_protocols setting did.
> Do I still need, if I ever needed, the "ssl_protocols = " setting?
All these ssl_* settings just go to OpenSSL without Dovecot (or I)...
2015 Mar 21
2
imap-login SSLv3 causes signal 11, core dump and DoS. ssl_protocols = ??
...r 20 11:36:25 MAILHOST dovecot: [ID 583609 mail.info] imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14076102:SSL routines:SSL23_GET_CLIENT_HELLO:unsupported protocol, session=<eqr1ubYRWgB/AAAB>
>>
>>
>>
>> the "SSL23_GET_CLIENT_HELLO:unsupported protocol" seems to do what I thought the ssl_protocols setting did.
>> Do I still need, if I ever needed, the "ssl_protocols = " setting?
>
> All these ssl_* settings just go to Open...