TLS problem after upgrading from v2.2 to v2.3

[Goetz Schultz]

Hi Jan,

fair enough. You may want to try mine to see if it works - if yes, it
might be worthwhile digging deeper. Tbh I had not default settings on
for a long time.


Thanks and regards

  Goetz R. Schultz

On 06/01/18 18:30, Jan Vejvalka wrote:
> Thanks for your reply; I used the defaults, both before and after the
> upgrade, cf. https://wiki2.dovecot.org/Upgrading/2.3 -> Setting default
> changes. The new defaults broke the connection.
> 
> Jan
> 
> 
> 
>> what are your settings?
>>
>> Mine are below and they work just fine:
>>
>> ssl_cipher_list =
>> ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK:!SSLv2:!SSLv3
>>
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <https://dovecot.org/pipermail/dovecot/attachments/20180106/b6aedd62/attachment.sig>