[Pkg-openssl-devel] Bug#706423: Bug#706423: openssl: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:337:

[Kurt Roeckx]

On Wed, Jun 12, 2013 at 05:29:20PM -0400, Gedalya wrote:
> On 06/12/2013 02:35 PM, Kurt Roeckx wrote:
> >This start a succesful (TLSv1) connection for me:
> >openssl s_client -connect mail.megacontractinginc.com:25 -starttls smtp -crlf
> >
> >But I can reproduce some weird behaviour with it that goes away
> >when I use -no_tls1_2.
> >
> >
> >Kurt
> 
> Found another example.
> GnuTLS negotiates the same cipher as openssl would with only TLSv1 enabled.

I didn't notice before that -no_tsl1_2 also resulted in a
different cipher being selected.  Without -no_tsl1_2 I get
DES-CBC3-SHA, with I get RC4-MD5.

gnutls-cli goes for:
- Key Exchange: RSA
- Cipher: ARCFOUR-128
- MAC: MD5


Kurt