Warning: gnome evolution drop old TLS protocol and you get "Error performing TLS handshake: A packet with illegal or unsupported version was received."

[Dario Lesca]

If you use a old server without  TLS 1.2 enable, you get:

"Error performing TLS handshake: A packet with illegal or unsupported
version was received."

See: 
https://www.mail-archive.com/[e-mail]/msg1735837...

There is a work around:

$ G_TLS_GNUTLS_PRIORITY="NORMAL:%COMPAT:+VERS-TLS1.0" evolution

but .... It's bette advise all.

Thanks


-- 
Dario Lesca
(inviato dal mio Linux Fedora 31 Workstation)

[Dario Lesca]

Il giorno mar, 07/04/2020 alle 16.46 +0200, Dario Lesca ha scritto:
>  There is a work around:
>  
>  $ G_TLS_GNUTLS_PRIORITY="NORMAL:%COMPAT:+VERS-TLS1.0" evolution 
On evolution ML Milan say that:
 
>  the protocols are disabled system-wide.
>  Read (and edit) the /etc/crypto-policies/config
>  file to change the settings. I do not know whether it has any user-
>  level setting, apart of the environment variable you found. 
Someone know how to configure this file for change the default system-
wide ?

Thanks

-- 
Dario Lesca
(inviato dal mio Linux Fedora 31 Workstation)

[Michael Cronenworth]

On 4/7/20 11:28 AM, Dario Lesca wrote:
>  On evolution ML Milan say that:
> > the protocols are disabled system-wide.
> > Read (and edit) the /etc/crypto-policies/config
> > file to change the settings. I do not know whether it has any user-
> > level setting, apart of the environment variable you found.
>
>  Someone know how to configure this file for change the default system-wide ? 
Since you are posting to the test list I am assuming you are using Fedora Rawhide 
(33). You would be affected by the upcoming Change[1] that disables TLS 1.0/1.1 by 
default.

Instead of looking for ways to enable TLS 1.0/1.1 you should engage with your 
provider to offer TLS 1.2 or 1.3.


[1] https://fedoraproject.org/wiki/Changes/StrongCryptoSettings2

[Dario Lesca]

Il giorno mar, 07/04/2020 alle 11.35 -0500, Michael Cronenworth ha
scritto:
>  Since you are posting to the test list I am assuming you are using
>  Fedora Rawhide (33). You would be affected by the upcoming Change[1]
>  that disables TLS 1.0/1.1 by default. 
I use Fedora 32 ... and the TLS 1.0/1.1 are already disabled by default

-- 
Dario Lesca
(inviato dal mio Linux Fedora 31 Workstation)

[Michael Cronenworth]

On 4/7/20 12:30 PM, Dario Lesca wrote:
>  I use Fedora 32 ... and the TLS 1.0/1.1 are already disabled by
> default 
Please file a bug.

[Dario Lesca]

Il giorno mar, 07/04/2020 alle 13.43 -0500, Michael Cronenworth ha
scritto:
>  On 4/7/20 12:30 PM, Dario Lesca wrote:
>  > I use Fedora 32 ... and the TLS 1.0/1.1 are already disabled by
>  > default
>  
>  Please file a bug. 
https://bugzilla.redhat.com/show_bug.cgi?id=1821934

-- 
Dario Lesca
(inviato dal mio Linux Fedora 31 Workstation)

[Dario Lesca]

Il giorno mar, 07/04/2020 alle 23.01 +0200, Dario Lesca ha scritto:
>  > Please file a bug.
>  
>  https://bugzilla.redhat.com/show_bug.cgi?id=1821934 
There is some news for this issue?

Will fedora 32 come out with this new setting for TLS?

Thank for reply

-- 
Dario Lesca
(inviato dal mio Linux Fedora 31 Workstation)

[Rex Dieter]

Dario Lesca wrote:

>  Il giorno mar, 07/04/2020 alle 16.46 +0200, Dario Lesca ha scritto:
> > There is a work around:
> > 
> > $ G_TLS_GNUTLS_PRIORITY="NORMAL:%COMPAT:+VERS-TLS1.0" evolution
>  
>  On evolution ML Milan say that:
>   
> > the protocols are disabled system-wide.
> > Read (and edit) the /etc/crypto-policies/config
> > file to change the settings. I do not know whether it has any user-
> > level setting, apart of the environment variable you found.
>  
>  Someone know how to configure this file for change the default system-
>  wide ? 
See if this helps:
https://fedoraproject.org/wiki/Changes/StrongCryptoSettings#Upgrade.2Fcom...

-- Rex

[Dario Lesca]

Il giorno mar, 07/04/2020 alle 12.01 -0500, Rex Dieter ha scritto:
>  See if this helps:
>
> https://fedoraproject.org/wiki/Changes/StrongCryptoSettings#Upgrade.2Fcom...
Yes, this help.

Thank 

-- 
Dario Lesca
(inviato dal mio Linux Fedora 31 Workstation)