Web lists-archives.com

Re: dovecot, openssl, TLS1.0




Hello,

> On 5 Nov 2018, at 21:19, Brad Rogers <brad@xxxxxxxxxxxx> wrote:

>> In spite of some effort I haven't found this sysadmin. Can you please
>> give me some pointers...
> 
> Important information regarding an update, such as a change in default
> behaviour of a package, is emailed to the sysadmin user.  This is usually
> root, IIRC, but can be reconfigured to be anybody.

Is there a package that needs to be installed for that to happen?

On my postfix installation there is no sysadmin alias (there is system, admin, and many others). Nor is there any sign of undelivered emails to sysadmin in the mail logs.

>  Changing back the defaults in /etc/ssl/openssl.cnf to previous system
>  wide defaults can be done using:
>  MinProtocol = None
>  CipherString = DEFAULT

This helps indeed, even though I recognise that there is a security issue.

I hope either Apple will fix OS X El Capitan to fully support TLSv1.2, or users will stop using 9-year-old laptops that cannot be upgraded any further than that OS X version. (But why chuck a perfectly working computer??)

Thanks again for your help,
Jan

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail