Exim port 465 TLSv1 and TLSv1.1 not allowed

mmgenius

Verified User
Joined
Jan 20, 2004
Messages
122
We have setup a new CentOS 8 server and we have noticed that exim doesn't allow TLSv1 and TLSv1.1 connections on port 465.
On an older server (CentOS 7) with the same exim version and exim.conf version exim does allow TLSv1 and TLSv1.1 on port 465.
On port 993 TLSv1 and TLSv1.1 works

CentOS 8 server
- exim 4.92.3
- exim.conf 4.5.18
- openssl 1.1.1

CentOS 7 server
- exim 4.92.3
- exim.conf 4.5.18
- openssl 1.0.2k

tests:
openssl s_client -connect localhost:465 -tls1
--> Error:
140179698976576:error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version:ssl/record/rec_layer_s3.c:1528:SSL alert number 70

openssl s_client -connect localhost:465 -tls1_1
--> Error:
140519893247808:error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version:ssl/record/rec_layer_s3.c:1528:SSL alert number 70

openssl s_client -connect localhost:465 -tls1_2
--> No Error

openssl s_client -connect localhost:993 -tls1
--> No Error

openssl s_client -connect localhost:993 -tls1_1
--> No Error

openssl s_client -connect localhost:993 -tls1_1
--> No Error

On the CentOS 7 server, all test are with No Error

I already search but I can't find any message a not allowing TLSv1 and TLSv1.1 connections in CentOS 8 and openssl 1.1.1

Does anyone has a idea what could be the problem?

Kind regards,
Maarten
 

ikkeben

Verified User
Joined
May 22, 2014
Messages
688
Location
Netherlands Germany
YUP i did post some here in forum about that changes .
ONe here


 
Last edited:
Top