On Friday, February 5, 2016 at 3:38:03 PM UTC+5:30, Luis Clemente wrote:
> Em sexta-feira, 5 de fevereiro de 2016 08:06:27 UTC-2, Luis Clemente escreveu:
> > Em terça-feira, 2 de fevereiro de 2016 23:55:17 UTC-2, Claus Aßmann escreveu:
> > > Luis Clemente wrote:
> > >
> > > > Few months ago I enabled TLSv1 only on Sendmail setting up
> > > > the line -D_FFR_TLS_1 on site.config.m4 file and recompiled
> > >
> > > Why do you think that _FFR_TLS_1 has anything to do with TLSv1? It
> > > sems you are using a fairly old sendmail version, I found this back
> > > in 8.14:
> > > #if _FFR_TLS_1
> > > /* More STARTTLS options, e.g., secondary certs. */
> > >
> > > > sendmail. Now there is a need to enable only TLSv1.2 and I
> > > > am wondering if there is another option of -D_FFR_TLS_1 like
> > > > -D_FFR_TLS_1_2 or something like this.
> > >
> > > The TLS version that can be used are entirely dependent on the
> > > OpenSSL version you are using for sendmail.
> > >
> > >
> > > --
> > > Note: please read the netiquette before posting. I will almost never
> > > reply to top-postings which include a full copy of the previous
> > > article(s) at the end because it's annoying, shows that the poster
> > > is too lazy to trim his article, and it's wasting the time of all readers.
> >
> >
> > Hello Claus,
> >
> > We have another sendmail server running with version 8.15.1 and after test we could see that TLSv1.2 is working fine, as you pointed a version update mayn resolve this issue. Thank you very much!!
> >
> > Regard's
> >
> > Luis
> Server public key is 2048 bit
> Secure Renegotiation IS supported
> Compression: NONE
> Expansion: NONE
> SSL-Session:
> Protocol : TLSv1.2
> Cipher : DHE-RSA-AES256-GCM-SHA384
> Session-ID: 5E8426ACFE1D2D215723B8DE4633A061179A23A8E1473745FE59C9062A55BE52
> Session-ID-ctx:
> Master-Key: D240129EA269C40C35A632BF70344044492D072C1028F2A8C871299A92091D58E510FAB7B4DE0517804E53AEFECEC043
> Key-Arg : None
> PSK identity: None
> PSK identity hint: None
> SRP username: None
> TLS session ticket lifetime hint: 1 (seconds)
> TLS session ticket:
> 0060 - f6 68 86 6e 5c 2f ae 80-8f dd 82 b9 00 35 2e 5e .h.n\/.......5.^
> 0070 - e6 52 c1 94 d3 ec 12 ea-cc 46 eb 88 09 7a 79 d8 .R.......F...zy.
> 0080 - 3b b9 cf 64 ab b4 c1 b8-b0 54 b6 ce 5f 60 05 e8 ;..d.....T.._`..
> 0090 - 4a 1c f7 e0 07 57 30 ef-1d 00 32 63 9f 66 ae 3b J....W0...2c.f.;
>
> Start Time: 1454666622
> Timeout : 7200 (sec)
> Verify return code: 19 (self signed certificate in certificate chain)
> ---