Hi Jacques
I managed to reproduce the issue. That's a start!!
I will do further investigation
Cheers
Jmarie
jburel wrote:Hi Jacques
Debian 9 will come with open SSL 1.1.0
and ADH ciphers are no longer available
https://www.openssl.org/docs/man1.1.0/apps/ciphers.html
Those ciphers are "used" in https://github.com/openmicroscopy/openm ... s.xml#L478
I have tried various options but so far nothing has worked
A downgrade to openssl 1.0.2k did not help either
$ cat /etc/debian_version
9.0
$ openssl version
OpenSSL 1.1.0f 25 May 2017
$ openssl ciphers ADH
ADH-AES256-GCM-SHA384:ADH-AES128-GCM-SHA256:ADH-AES256-SHA256:ADH-CAMELLIA256-SHA256:ADH-AES128-SHA256:ADH-CAMELLIA128-SHA256:ADH-AES256-SHA:ADH-CAMELLIA256-SHA:ADH-AES128-SHA:ADH-SEED-SHA:ADH-CAMELLIA128-SHA
$ openssl ciphers aDH
Error in cipher list
140255844652288:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:../ssl/ssl_lib.c:2018:
jacques2020 wrote:To complete my answer:
PS: If the debugging appears too complex, let me know. I can also bring everything back to 5.2.7 and wait for a few month it meant to be solved (I have backups). The only issue that pushed me to upgrade is that cleanse is not working on 5.2.7 so we accumulate data without being able to clean the up.
openssl s_client -cipher "$cipher" -connect localhost:4064
- it isn't? I hadn't realized. Not to hijack this thread but can you point me to a bug report? Maybe I can investigate.cleanse is not working on 5.2.7
Return to Installation and Deployment
Users browsing this forum: No registered users and 1 guest