[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: gnutls-cli fails to handshake with Exchange server that uses DES-CBC
|
From: |
Nikos Mavrogiannopoulos |
|
Subject: |
Re: gnutls-cli fails to handshake with Exchange server that uses DES-CBC3-SHA cipher |
|
Date: |
Sun, 25 Mar 2012 10:56:37 +0200 |
|
User-agent: |
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.24) Gecko/20111114 Icedove/3.1.16 |
On 03/24/2012 10:57 PM, Thomas Fitzsimmons wrote:
> Hi,
> gnutls-cli --verbose --debug 10 --port 993 "<imap_hostname>"
> fails to handshake with my Exchange server, whereas
> openssl s_client -debug -port 993 -host "<imap_hostname>"
> succeeds. OpenSSL reports that the server is using the DES-CBC3-SHA
> cipher.
> For background on this issue see:
> http://debbugs.gnu.org/cgi/bugreport.cgi?bug=10904#14
Hello,
The comment below in the thread is very interesting. Could you send me
a capture of a failed handshake?
> gnutls.c: [1] Received unexpected handshake message 'CERTIFICATE'
> (11). Expected 'SERVER HELLO' (2)
Do priority strings like the ones below help?
http://www.gnu.org/software/gnutls/manual/html_node/Interoperability.html
regards,
Nikos