SSL Errors

Post Reply
andymp3
Posts: 10
Joined: Fri Oct 19, 2018 11:46 pm

SSL Errors

Post by andymp3 »

Hi,
Using the latest release any connection to GigaNews or Newshosting results in an SSL error so cannot connect. Reverting to previous version is fine. Maybe new SSL lib?

Andy
alex
Posts: 4543
Joined: Thu Feb 27, 2003 5:57 pm

Re: SSL Errors

Post by alex »

What is the setting Edit menu->Properties->General, SSL in the previous and the latest versions (both)?

The default TLS (all) is the same as previous default SSLv3+, just a different name since SSLv3 has been depreciated, so it is not shown as a choice in the latest version.

If your setting is non-default and you let me know what it is I could check what is wrong. Change it to the default or TLS v1.2. With the default setting it appears to connect to giganews or newshosting and it is running on the search server for some time already at least for ngroups. I'm not sure if the previous TLS versions are depreciated too or still supported by the SSL library.

Later:

It looks like TLS v1 and TLS v1.1 are deprecated too "The internet standards and regulatory bodies have deprecated or disallowed TLS versions 1.0 and 1.1". So I need to remove them from the options and maybe at least by default they are not included into the OpenSSL library functionality and there is no purpose to include deprecated SSL methods.
alex
Posts: 4543
Joined: Thu Feb 27, 2003 5:57 pm

Re: SSL Errors

Post by alex »

I removed the deprecated SSL methods and reuploaded the files, so you can try to have a deprecated SSL method set in a previous release and just run the currently uploaded version and it will change it to TLS (all). Usually users don't change the SSL default method, so it is not a big deal.

So in the end all what has left - TLS v1.2 and TLS (all) since there is no TLS v1.3 method to force v1.3 unless to exclude v1.2 so it will be the only one left.

Next https will be deprecated if the quantum computers become common :)
andymp3
Posts: 10
Joined: Fri Oct 19, 2018 11:46 pm

Re: SSL Errors

Post by andymp3 »

Thank you Alex! Right you are! Using the TLS all option works great. Previously was set to TLS1.1 I think! Thanks again!

Andy
alex
Posts: 4543
Joined: Thu Feb 27, 2003 5:57 pm

Re: SSL Errors

Post by alex »

I've updated the release notes too. TLS v1.1 no more.
Post Reply