On Fri, Mar 23, 2012 at 06:49:43PM +0100, Stephen Henson via RT wrote: > > [[email protected] - Fri Mar 23 18:21:39 2012]: > > > > OpenSSL negotiation times out when connecting to Outlook Exchange 2007 > > both through Outlook Web Access (webmail) and IMAP (POP untested). This > > bug appeared between version 1.0.0h and 1.0.1-beta1. > > > > OS: Arch Linux > > Applications tested: Offlineimap (IMAP), elinks (webmail), wget (webmail). > > Version: 1.0.1, 1.0.1-beta{3,2,1}. > > Versions-not-affected: 1.0.0h > > > > To reproduce, run `wget https://owa.mit.edu/`. > > > > It isn't clear that this is a problem with OpenSSL. The server doesn't > seem to be responding to the OpenSSL client hello. If you disable > TLSv1.2 (with -no_tls1_2) or disable AES or ECDH ciphersuites or various > other things it responds OK.
-no_tls1_2 and -no_tls1_1 doesn't work for me, I need to use -tls1 (or -ssl3) to be able to get a connection. gnutls-cli which also supports TLS 1.1 and 1.2 works with that site without problem. https://sourceforge.net/ has the same problem, both report BigIP as the server. Kurt ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
