Skip to content
This repository has been archived by the owner on Jul 10, 2019. It is now read-only.

Cipher selection, no shared cipher #413

Open
darklajid opened this issue Dec 21, 2015 · 1 comment
Open

Cipher selection, no shared cipher #413

darklajid opened this issue Dec 21, 2015 · 1 comment

Comments

@darklajid
Copy link

So, I have read the project status issue and the announcement. I understand this is basically unmaintained right now?

Still, I wanted to give it a try and saw this here on the server, with an endless loop for the client (either the web client or the Android one):

Dec 21 16:22:50 ben dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=MyClientIp, lip=MyServerId, TLS handshaking: SSL_accept() failed: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher

My postfix contains this in main.cf

main.cf:tls_preempt_cipherlist = yes
main.cf:smtpd_tls_mandatory_ciphers = high

I expect(ed) that to work, K-9 or any other client I tried certainly have no issue.

@tanx
Copy link
Member

tanx commented Dec 22, 2015

So, I have read the project status issue and the announcement. I understand this is basically unmaintained right now?

See #405 (comment)

Still, I wanted to give it a try and saw this here on the server, with an endless loop for the client (either the web client or the Android one):

Dec 21 16:22:50 ben dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=MyClientIp, lip=MyServerId, TLS handshaking: SSL_accept() failed: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher

My postfix contains this in main.cf

main.cf:tls_preempt_cipherlist = yes
main.cf:smtpd_tls_mandatory_ciphers = high

Thanks for pointing it out. We'd be happy to accept any pull requests if you can spot down and fix the issue?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants