[Pkg-openssl-devel] Bug#871987: openssl breaks dovecot

Gedalya gedalya at gedalya.net
Wed Aug 16 07:29:08 UTC 2017


My perspective on this, from the client side, doing my routine sysadmin work:

When disabling TLSv1 on a server, I'm no longer able to verify that using
openssl s_client -tls1, I get "s_client: Option unknown option -tls1".

Also I am unable to connect to some old servers supporting only TLSv1.

I came across both types of issues just in the past 24 hours.

I can always downgrade, or just use a stretch (or older) system for this minor
task, but it seems this issue could be rethought.

I think hard-disabling at compile time is a little too soon.

Thanks,

Gedalya



More information about the Pkg-openssl-devel mailing list