[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: enforce TLS 1.2 in OpenLDAP server side

To: Dieter Klünter <dieter@dkluenter.de>
Subject: Re: enforce TLS 1.2 in OpenLDAP server side
From: Steve Zeng <steve.zeng@booking.com>
Date: Sat, 10 Sep 2016 20:27:58 +0000
Accept-language: en-US
Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
Content-language: en-CA
Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=booking.com ; s=bk; h=MIME-Version:Content-Transfer-Encoding:Content-Type:In-Reply-To: References:Message-ID:Date:Subject:CC:To:From; bh=EbqTgCc+O4eGCohSn9K46lGTAOx6egCv0IwQYEdPxgQ=; b=xQHt9TNdPg6p0/bfSnyv8ROCCN rYMWsIrukw83SyKKy0NrTl3ynxHnwBYrhf+EEHPxK6zz+KlPZTu/9w+m+mcQRKIYwYtRlXAmeQb+T Qh2Yo3K5k4w187tic7sJ8Y0XeMrIjj/oZj9KA9FXZVA3xsoQLrQ77e8e1W+Iv3hMPOb8=;
In-reply-to: <20160910095733.618c4bc2@pink.avci.de>
References: <4E5E9A63-EA95-484B-9AD4-D45B8EE5CB1D@booking.com>, <20160910095733.618c4bc2@pink.avci.de>
Thread-index: AQHSCr4p4MvAukiipEe0Ct1yqNOPbaByS7mAgADibk0=
Thread-topic: enforce TLS 1.2 in OpenLDAP server side

OpenSSL

Thanks,
Steve

> On Sep 10, 2016, at 00:58, Dieter Klünter <dieter@dkluenter.de> wrote:
> 
> Am Fri, 9 Sep 2016 17:18:19 +0000
> schrieb Steve Zeng <steve.zeng@booking.com>:
> 
>> Hi, all
>> 
>> What is the best settings to enforce TLS 1.2 in OpenLDAP server side
>> (openldap-2.4.44-1.el6)?
>> 
>> I make the change below:
>> 
>> From: 
>> olcTLSProtocolMin: 0.0
>> 
>> To:
>> olcTLSProtocolMin: 3.3
>> 
>> However, TLS1.0 still shows up in a lot of tcpdump packets:
> 
> Is this compiled with GnuTLS or OpenSSL?
> 
> -Dieter
> 
> -- 
> Dieter Klünter | Systemberatung
> http://sys4.de
> GPG Key ID: E9ED159B
> 53°37'09,95"N
> 10°08'02,42"E
>

References:
- enforce TLS 1.2 in OpenLDAP server side
  - From: Steve Zeng <steve.zeng@booking.com>
- Re: enforce TLS 1.2 in OpenLDAP server side
  - From: Dieter Klünter <dieter@dkluenter.de>

Prev by Date: Re: enforce TLS 1.2 in OpenLDAP server side
Next by Date: Re: enforce TLS 1.2 in OpenLDAP server side
Index(es):
- Chronological
- Thread