search

mozilla / ssl-config-generator

Mozilla SSL Configuration Generator
https://ssl-config.mozilla.org/
Mozilla Public License 2.0
374 stars 60 forks source link

Exim, Intermediate #191

Closed ente76 closed 1 year ago

ente76 commented 1 year ago

When selecting Exim on Intermediate option, TLS 1.2 and TLS 1.3 are allowed, but the required ciphers contain only TLS 1.2 ciphers, i.e., implicitly TLS 1.3 is disallowed.

tomato42 commented 1 year ago

Did you actually test that TLS 1.3 doesn't work?

TLS 1.2 and TLS 1.3 ciphers are set using different APIs in OpenSSL so when TLS 1.3 ciphers aren't specified, OpenSSL will use the default set.

ente76 commented 1 year ago

I am sorry, I did not actually test. Now I did and it is working.