Re: Latest 2.8-dev not doing TLS 1.2

2023-05-20 Thread Shawn Heisey
On 5/19/23 14:21, Zakharychev, Bob wrote: ssl-default-bind-options no-tls-tickets ssl-min-ver TLSv1.2 I'd suggest you try with ssl-default-bind-options as in my config, and maybe ssl-default-bind-ciphers as well as these are for TLS I have been unknowingly hampered in my tests by the fact

RE: Latest 2.8-dev not doing TLS 1.2

2023-05-19 Thread Zakharychev, Bob
Shawn, >From: Shawn Heisey >Sent: Friday, May 19, 2023 3:33 PM > >I have a config that I have had in place for a while now. It did TLS >1.2 and 1.3, and got an A+ rating at SSL Labs. > >Today I was running the SSL test again and it only got an A rating >instead of A+. Looking deeper at the

Latest 2.8-dev not doing TLS 1.2

2023-05-19 Thread Shawn Heisey
I have a config that I have had in place for a while now. It did TLS 1.2 and 1.3, and got an A+ rating at SSL Labs. Today I was running the SSL test again and it only got an A rating instead of A+. Looking deeper at the results, I saw that it was no longer doing TLS 1.2 ... only TLS 1.3.