Serra

  • Total activity 181
  • Last activity
  • Member since
  • Following 0 users
  • Followed by 0 users
  • Votes 3
  • Subscriptions 42

Comments

Recent activity by Serra Recent activity Votes
  • The patch is downloadable from TechNet, which is a Microsoft site used by technical people. It can be downloaded directly from there.

  • I've found a Windows 7 and Outlook 2016 fix for TLS 1.2 that has worked on a bunch of machines. TLS12-Enable.reg, which can be found here. This is TechNet for Exchange Servers, but the reg fix wo...

  • Just an update on DOVECOT. Currently Dovecot needs: SSL Protocols set to TLSv1.2 !TLSv1.1 !TLSv1 !SSLv3 !SSLv2 To be fully complaint on June 30th on a CENTOS 6 & 7 machine. CENTOS 5 shouldn't wo...

  • Ok, here is the latest: PCI Compliant Settings: Dovecot SSL Cipher List: ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-...

  • Pure FTP is working with: AES128+EECDH:AES128+EDH:!SSLv2:!SSLv3:!3DES Failing on port 2083, 2087, and 2096: TLSv1_2 : ECDHE-RSA-DES-CBC3-SHA TLSv1_2 : EDH-RSA-DES-CBC3-SHA TLSv1_2 : DES-CBC3-SHA ...

  • I'm going with: AES128+EECDH:AES128+EDH:!SSLv2:!SSLv3:!3DES Looks like TLSV1 and TLSV1.1 have been removed. The !3DES wasn't working before, we will have to see if it passes with that.

  • Setting for PCI Compliance 1/17: EXIM: tls_require_ciphers HIGH:!aNULL:!eNULL:!PSK:!RC4:!MD5:!aDH:!DH:!RC4-MD5:!RC4-SHA:!DSS:!DES:!3DES cPanel: (Home >> Service Configuration >> cPanel Web Servi...

  • I'm still getting errors, I'm seeing issues on ports: 110, 465, 993, 995 and 2083, 2087, 2096 I've tried for EXIM Ports: tls_require_ciphers HIGH:!aNULL:!eNULL:!PSK:!RC4:!MD5:!aDH:!DH:!RC4-MD5:!RC...

  • Hi, Serra, would you mind re-posting the current settings you are using for all the services, including EXIM, that won't break Outlook 2007, and older devices? Thanks much! As of last month, tls_r...

  • I don't have those active on my server, so I passed last month. I suspect we took those off a while back.