Bug#710657: gnutls: Negiotates an SSL v3.0 cipher when talkign to openssl using TLS 1.2

James Cloos cloos at jhcloos.com
Sun Jun 2 23:25:18 UTC 2013


For whatever it is worth, using the same cipher suite on the servers
(each running sid), gnutls3 chooses this when talking to nginx-1.4.1:

- Description: (TLS1.2-PKIX)-(ECDHE-RSA-SECP256R1)-(AES-256-GCM)-(AEAD)

but this when talking to apache2.4:

- Description: (TLS1.2-PKIX)-(ECDHE-RSA-SECP256R1)-(AES-128-CBC)-(SHA1)

Both ought to negotiate the former, mainly due to GCM and AEAD.

Sid's gnutls2 negotiates the same suites, but gnutls2 doesn't have the
nice Description output which gnutls3 has.

-JimC
-- 
James Cloos <cloos at jhcloos.com>         OpenPGP: 1024D/ED7DAEA6



More information about the Pkg-gnutls-maint mailing list