I suspect that you’ll be out of luck until TLSv1.3 is implemented. I’ve found the same to be true with the new 10 gb sfp switches in our infrastructure which surprisingly still implement TLSv1.0 & broken CGI web server. Regards Patrick
> On Jun 1, 2021, at 3:44 PM, Stuart Henderson <s...@spacehopper.org> wrote: > > On 2021-05-30, Denis Fondras <open...@ledeuns.net> wrote: >> Le Fri, May 28, 2021 at 03:30:58PM -0700, Chris Cappuccio a écrit : >>> You might try "set state-defaults pflow, sloppy", also in some scenarios >>> you >>> might need "set state-policy floating" >>> >>> If "sloppy" fixes it, there may be some bugs to hunt. >>> >> >> "sloppy" seems to fix the issue. I will do more tests this week before >> declaring >> victory :) >> >> Thank you Chris. >> >> > > Oh watch out with sloppy. Keep an eye on your state table size. >
