Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-21 Thread davenull
Hello On 2024-06-17 16:14, Vincent Lefevre wrote: On 2024-06-17 08:26:39 -0400, Dan Ritter wrote: On stable: $ openssl list -disabled Disabled algorithms: IDEA MD2 MDC2 RC5 SCTP SSL3 ZLIB So, SSL3 support was removed at least that long ago. I think it was actually dropped around 2016. That's

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-20 Thread Marco Moock
Am 20.06.2024 um 11:05:10 Uhr schrieb Vincent Lefevre: > I've got a confirmation that their Radius servers still use SSL3, > and they said that they could not upgrade them. Then they have very, very outdated stuff. Talk to the security department at your site, maybe they make them hurry up.

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-20 Thread Vincent Lefevre
On 2024-06-17 15:08:54 -0400, Dan Ritter wrote: > Vincent Lefevre wrote: > > On 2024-06-17 08:26:39 -0400, Dan Ritter wrote: > > > On stable: > > > $ openssl list -disabled > > > Disabled algorithms: > > > IDEA > > > MD2 > > > MDC2 > > > RC5 > > > SCTP > > > SSL3 > > > ZLIB > > > > > > So, SSL3 s

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-17 Thread Dan Ritter
Vincent Lefevre wrote: > On 2024-06-17 08:26:39 -0400, Dan Ritter wrote: > > On stable: > > $ openssl list -disabled > > Disabled algorithms: > > IDEA > > MD2 > > MDC2 > > RC5 > > SCTP > > SSL3 > > ZLIB > > > > So, SSL3 support was removed at least that long ago. I think it > > was actually dropp

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-17 Thread Nicolas George
Richard (12024-06-17): > There is a coordination, so you can use the same login data all over the > world. At least that's how it's supposed to work. But afaik the protocols > themselves aren't predefined. That's up to the local IT department how they > implement this. Authentication should always

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-17 Thread Richard
There is a coordination, so you can use the same login data all over the world. At least that's how it's supposed to work. But afaik the protocols themselves aren't predefined. That's up to the local IT department how they implement this. Authentication should always be done locally, with synchroni

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-17 Thread Vincent Lefevre
On 2024-06-17 10:18:09 -0400, Stefan Monnier wrote: > > Under Debian/unstable, I can't connect to eduroam due to the following > > reason: > > AFAIK, while "the eduroam" looks like one thing it's just a bunch of > local wifi networks, each one administered&managed mostly independently > and with d

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-17 Thread Stefan Monnier
> Under Debian/unstable, I can't connect to eduroam due to the following > reason: AFAIK, while "the eduroam" looks like one thing it's just a bunch of local wifi networks, each one administered&managed mostly independently and with different configurations. By and large, if you can connect to ed

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-17 Thread Vincent Lefevre
On 2024-06-17 08:26:39 -0400, Dan Ritter wrote: > On stable: > $ openssl list -disabled > Disabled algorithms: > IDEA > MD2 > MDC2 > RC5 > SCTP > SSL3 > ZLIB > > So, SSL3 support was removed at least that long ago. I think it > was actually dropped around 2016. That's strange because when I insta

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-17 Thread Richard
If your university still uses SSL 3.x instead on TLS there might be something wrong. You could check on cat.eduroam.org if there's an installer for your university, that's usually the easiest way to set up eduroam. On paper, Debian does support PWD, but in reality I was never able to use it, while

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-17 Thread Dan Ritter
Vincent Lefevre wrote: > Hi, > > Under Debian/unstable, I can't connect to eduroam due to the following > reason: > > Jun 17 13:58:31 qaa wpa_supplicant[1184]: wlp0s20f3: > CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 > Jun 17 13:58:31 qaa wpa_supplicant[1184]: wlp0s20f3: CTRL-EVENT-EAP-ME

Re: can't connect to eduroam due to SSL3 unsupported protocol

2024-06-17 Thread Marco Moock
Am 17.06.2024 um 14:07:13 Uhr schrieb Vincent Lefevre: > Anyone knows what's wrong? If they really rely on SSL3.0 it is the fault of the network operator because that protocol is outdated, has some vulnerabilities and is deprecated for years. Most systems have it disabled by default. -- Gruß Ma

can't connect to eduroam due to SSL3 unsupported protocol

2024-06-17 Thread Vincent Lefevre
Hi, Under Debian/unstable, I can't connect to eduroam due to the following reason: Jun 17 13:58:31 qaa wpa_supplicant[1184]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 Jun 17 13:58:31 qaa wpa_supplicant[1184]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) sele