Bernard Quatermass writes:

4.15.1 +  proto+ code

s_client -> default -ssl2  -ssl3  -tls1  -tls1_1  -tls1_2
TLS_PROTOCOL
unset       TLSv1.2  FAIL   FAIL  TLSv1  TLSv1.1  TLSv1.2
SSL23       TLSv1.2 SSLv2  SSLv3  TLSv1  TLSv1.1  TLSv1.2
SSL3          SSLv3  FAIL  SSLv3   FAIL     FAIL     FAIL
SSL3+       TLSv1.2  FAIL  SSLv3  TLSv1  TLSv1.1  TLSv1.2
TLSv1         TLSv1  FAIL   FAIL  TLSv1     FAIL     FAIL
TLSv1+      TLSv1.2  FAIL   FAIL  TLSv1  TLSv1.1  TLSv1.2
TLSv1.1     TLSv1.1  FAIL   FAIL   FAIL  TLSv1.1     FAIL
TLSv1.1+    TLSv1.2  FAIL   FAIL   FAIL  TLSv1.1  TLSv1.2
TLSv1.2     TLSv1,2  FAIL   FAIL   FAIL     FAIL  TLSv1.2
TLSv1.2+    TLSv1.2  FAIL   FAIL   FAIL     FAIL  TLSv1.2


being table driven allows for easy upgrade, and should allow easy adoption of TLSv1.3 when they finally sort it out.

Currently running this on test & UAT here without problems.

This is very nice footwork. I like this solution.

Attachment: pgp6PKGVBzH66.pgp
Description: PGP signature

------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://p.sf.net/sfu/Zoho
_______________________________________________
Courier-imap mailing list
Courier-imap@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to