Ok,<div><br></div><div>but the same browser accross different machine will not do the same.</div><div><br></div><div>Still strange to me.</div><div><br></div><div>(same behavior with stunnel 4.53 and 4.35, so as you said, it seems a client related behavior)</div>
<div><br></div><div>Regards,</div><div>Thomas.<br><br><div class="gmail_quote">On Tue, Apr 10, 2012 at 04:33, Leandro Avila <span dir="ltr"><<a href="mailto:leandro.avila@ymail.com">leandro.avila@ymail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Thomas,<br>
<br>
The most likely cause for the different algorithms is the use of different libraries.<br>
<br>
Stunnel uses OpenSSL<br>
Mozilla uses NSS<br>
Not sure what Google Chrome uses.<br>
<br>
Each library implements different cipher suites. So each browser might select different ciphers to connect<br>
to the same server.<br>
<br>
<br>
-----------------<br>
Leandro Avila<br>
<br>
<br>
________________________________<br>
From: Thomas Manson <<a href="mailto:dev.mansonthomas@gmail.com">dev.mansonthomas@gmail.com</a>><br>
To: Michal Trojnara <<a href="mailto:Michal.Trojnara@mirt.net">Michal.Trojnara@mirt.net</a>><br>
Cc: <a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br>
Sent: Friday, April 6, 2012 6:35 AM<br>
Subject: Re: [stunnel-users] the connection had to be retried using SSL 3.0. This typically means that the server is using very old software and may have other security issues :(<br>
<div class="im"><br>
<br>
Hi Mike,<br>
<br>
thanks for the explanation.<br>
<br>
So according to you, I should set anything to use the stunnel defaults?<br>
what's very strange is that from another PC (a colleague)<br>
<br>
</div> * google chrome I don't see the same crypting technology (CAMELLIA_256_CBC, Firefox report the same) <br>
* says the certificate can't be approved.(in another firefox too)<br>
* I've asked her to flush dns cache and retry<br>
<div class="im HOEnZb"><br>
On my desktop compter I get the same crypting but no certificate error<br>
<br>
On my laptop : I've the crypting I've reported in my first post. and the warning..;<br>
<br>
<br>
Any idea why the crypting are different ? (chrome versions are different on minor versions, same version for Firefox)<br>
<br>
Thomas.<br>
<br>
<br>
<br>
On Fri, Apr 6, 2012 at 12:53, Michal Trojnara <<a href="mailto:Michal.Trojnara@mirt.net">Michal.Trojnara@mirt.net</a>> wrote:<br>
<br>
ciphers = AES128-SHA<br>
<br>
</div><div class="HOEnZb"><div class="h5">_______________________________________________<br>
stunnel-users mailing list<br>
<a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br>
<a href="http://stunnel.mirt.net/mailman/listinfo/stunnel-users" target="_blank">http://stunnel.mirt.net/mailman/listinfo/stunnel-users</a><br>
_______________________________________________<br>
stunnel-users mailing list<br>
<a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br>
<a href="http://stunnel.mirt.net/mailman/listinfo/stunnel-users" target="_blank">http://stunnel.mirt.net/mailman/listinfo/stunnel-users</a><br>
</div></div></blockquote></div><br></div>