Re: enforce TLS 1.2 in OpenLDAP server side

Thanks for the note. So we need to rebuild it against OpenSSL?

Thanks, Steve

On Sep 10, 2016, at 13:37, Quanah Gibson-Mount quanah@zimbra.com wrote:

--On Saturday, September 10, 2016 10:57 AM +0200 Dieter Klünter dieter@dkluenter.de wrote:

...

...

However, TLS1.0 still shows up in a lot of tcpdump packets:

Is this compiled with GnuTLS or OpenSSL?

Since it is ".el6" that would generally imply a RHEL build. That would in turn mean it is most likely compiled against the known insecure and broken MozNSS libs. So neither GnuTLS or OpenSSL.

--Quanah

--

Quanah Gibson-Mount