<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Sebastian,</p>
<p>Thank You for You help. I added "<span
style="white-space: pre-wrap">-cipher DEFAULT:@SECLEVEL=0" and this resolved the case. </span>🙂</p>
<pre class="moz-signature" cols="72">Pozdrawiam serdecznie
Maciej Bogucki</pre>
<div class="moz-cite-prefix">On 11.03.2024 18:23, Sebastian Andrzej
Siewior wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20240311172314.v1xXWOW7@breakpoint.cc">
<pre class="moz-quote-pre" wrap="">On 2024-03-11 13:29:10 [+0100], Maciej Bogucki wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Hi,
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">Hi,
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">When I use stiati compiled openssl form different system I can have the
connection
root@nsd-sdproxy1:~# /tmp/openssl version
OpenSSL 1.0.1t 3 May 2016
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
that is stone age.
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">root@nsd-sdproxy1:~# /tmp/openssl s_client -connect 192.168.92.95:636
-CAfile /etc/ssl/certs/ca-certificates.crt
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
What happens if you add
-cipher DEFAULT:@SECLEVEL=0
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">On teh remote side is Windows 2008 with Active Directory over SSL/TLS.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
My condolences. If you can, get rid of it. It will haunt you!
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Pozdrawiam serdecznie
Maciej Bogucki
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Sebastian
</pre>
</blockquote>
</body>
</html>