[Pkg-openssl-devel] Bug#665452: Bug#665452: SSL23_GET_SERVER_HELLO:unsupported protocol

Tue Apr 24 22:06:58 UTC 2012

On Tue, Apr 24, 2012 at 09:43:04PM +0100, ael wrote:
> I also see this bug via offlineimap (python).
> 
> $ openssl s_client -connect imap.ntlworld.com:993
[...]
>     Protocol  : TLSv1.1

There is a problem with sites that only support TLS v1.1.

The problem is that openssl 1.0.0 turned on a non-existing
option in SSL_OP_ALL, which the 1.0.1 version interpretes as
disabling support for TLS 1.1.

Kurt