Hi Pontus,

Thx for your reply.

So I can ignore these Informations.

Regards
Martin



-----Ursprüngliche Nachricht-----
Von: Pontus Hellgren [mailto:pontus.hellg...@scandinavianhosting.se] 
Gesendet: Donnerstag, 2. Juni 2016 14:29
An: Martin Voßloh <martin.voss...@mhp.com>
Betreff: VB: [Assp-test] Couldn't upgrade to TLS for client

I case this do not reach the list.

I feel I have been muted/blocked from the list :-( None of my latest post have 
reached the list.

Regards,
Pontus

-----Ursprungligt meddelande-----
Från: Pontus Hellgren [mailto:pontus.hellg...@scandinavianhosting.se]
Skickat: den 2 juni 2016 14:27
Till: 'ASSP development mailing list' <assp-test@lists.sourceforge.net>
Ämne: SV: [Assp-test] Couldn't upgrade to TLS for client

Hi Martin!

I believe (and anyone can correct me) that you should not allow your TLS/SSL to 
run low security handshakes or connections.
This might expose your certificate. (due to low encryption) We do not allow 
anything lower than TLSv1 for TLS sessions.
We get the "Error" in our logs to but we see these as a "Warning/Notice"
ourselfs.
The sender have to retort to plain text rather than we expose our certificate 
to malice.

I see this a lot from Asian and African "senders/clients" and probably a couple 
of botnets trying this.
No newer client should refuse using TLSv1 or higher.
My guess is it's some kind of "fishing" to make you lower your security.
We don't!

I may stand corrected,
Pontus

-----Ursprungligt meddelande-----
Från: Martin Voßloh [mailto:martin.voss...@mhp.com]
Skickat: den 2 juni 2016 13:56
Till: ASSP development mailing list <assp-test@lists.sourceforge.net>
Ämne: [Assp-test] Couldn't upgrade to TLS for client

Hello,

I have very often this error in my logs:
Jun-01-16 11:39:39 [Worker_5] Error: Couldn't upgrade to TLS for client
XXX.XXX.XXX.XXX:

These settings I have for: SSL version used for transmission (SSL_version)
SSLv23:!SSLv3:!SSLv2

Should I try this :
In this case setting the version to 'SSLv23:!SSLv2:!SSLv3:!TLSv1_1:!TLSv1_2'
might help.

Or did I have another problem?

Thy and Regards
Martin

ASSP version 2.5.2(16142)




----------------------------------------------------------------------------
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic 
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning 
reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test





------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to