[Pkg-openssl-devel] Bug#871918: libssl1.1: tls_process_server_hello:unsupported protocol

[Michal Palenik]

it look like a something strange with libssl1.1 version 1.1.0f-4 and
some of the certificates.

openssl s_client -connect mail7.hostmaster.sk:465 (and port 995)

gives some buggy output (including connections with postfix or
fetchmail), (older versions on libssl1.1 were OK), however, others like

openssl s_client -connect kerio.comcraft.sk:465

are OK


what do you think is the problem?

michal

On Sat, 12 Aug 2017 19:55:24 +0200 Sebastian Andrzej Siewior <sebastian at breakpoint.cc> wrote:
> On 2017-08-12 16:19:08 [+0200], Christophe Troestler wrote:
> > After installing version 1.1.0f-4 of libssl1.1 (and openssl), fetchmail
> > started to report errors such as
> > 
> > fetchmail: OpenSSL reported: error:14171102:SSL
> > routines:tls_process_server_hello:unsupported protocol
> 
> tracked in #768843
> 
> > and mbsync also started to fail with
> > 
> > Socket error: secure connect to outlook.office365.com
> > ([2603:1026:205:14::2]:993): error:141640BF:SSL
> > routines:tls_construct_client_hello:no protocols available
> 
> tracked in #871813 / #871765
> 
> > I had to downgrade to continue being able to fetch my mail!
> 
> Closing the libssl bug as the issue is tracked in the leaf packages.
> 
> > Best,
> > C.
> 
> Sebastian
> 
> 

--