https://progress.opensuse.org/https://progress.opensuse.org/themes/openSUSE/favicon/favicon.ico?15829177842021-11-29T09:01:14ZopenSUSE Project Management ToolopenSUSE admin - tickets #102602: anna|elsa, daffy1|daffy2: SSL/TLS: Deprecated TLSv1.0 and TLSv1.1 Protocol Detectionhttps://progress.opensuse.org/issues/102602?journal_id=4686422021-11-29T09:01:14Zpjessenper@computer.org
<ul><li><strong>Assignee</strong> changed from <i>opensuse-admin</i> to <i>pjessen</i></li><li><strong>Private</strong> changed from <i>Yes</i> to <i>No</i></li></ul><p>anna - TLS v1.0 and v1.1 are disabled for smtp (outbound). <br>
anna - TLS v1.0 and v1.1 are enabled for smtpd (inbound), but none of the external addresses are accessible on port 25, anna is only an outbound relay. Anyway, I'll add :</p>
<pre><code>smtpd_tls_protocols = !SSLv2, !SSLv3
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
</code></pre>
<p>I expect elsa to be exactly the same. </p>
openSUSE admin - tickets #102602: anna|elsa, daffy1|daffy2: SSL/TLS: Deprecated TLSv1.0 and TLSv1.1 Protocol Detectionhttps://progress.opensuse.org/issues/102602?journal_id=4686542021-11-29T09:06:36Zpjessenper@computer.org
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Workable</i></li><li><strong>Assignee</strong> changed from <i>pjessen</i> to <i>opensuse-admin</i></li></ul><p>anna and elsa both done, but I have no access to daffy[12].</p>
openSUSE admin - tickets #102602: anna|elsa, daffy1|daffy2: SSL/TLS: Deprecated TLSv1.0 and TLSv1.1 Protocol Detectionhttps://progress.opensuse.org/issues/102602?journal_id=4702472021-12-03T08:00:04Zpjessenper@computer.org
<ul></ul><p>pjessen wrote:</p>
<blockquote>
<p>anna and elsa both done, but I have no access to daffy[12].</p>
</blockquote>
<p>What does daffy[12] run that uses TLS? </p>
openSUSE admin - tickets #102602: anna|elsa, daffy1|daffy2: SSL/TLS: Deprecated TLSv1.0 and TLSv1.1 Protocol Detectionhttps://progress.opensuse.org/issues/102602?journal_id=4704512021-12-03T18:56:11Zlrupp
<ul><li><strong>Status</strong> changed from <i>Workable</i> to <i>Closed</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li></ul><p>pjessen wrote:</p>
<blockquote>
<p>What does daffy[12] run that uses TLS?</p>
</blockquote>
<p>daffy[1,2] run login2.opensuse.org -> an apache in front of some services. <br>
This is now fixed. <a href="https://www.ssllabs.com/ssltest/analyze.html?d=login2.opensuse.org" class="external">https://www.ssllabs.com/ssltest/analyze.html?d=login2.opensuse.org</a> even shows an "A+" :-)</p>
<p>=> Closing, as all issues solved. Thanks!</p>