[prev in list] [next in list] [prev in thread] [next in thread]
List: konq-bugs
Subject: [Bug 108388] New: TLS handshake is not accepted
From: Roland Wenzel <rwenzel () dw-itsecurity ! de>
Date: 2005-07-01 8:09:41
Message-ID: 20050701100939.108388.rwenzel () dw-itsecurity ! de
[Download RAW message or body]
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
http://bugs.kde.org/show_bug.cgi?id=108388
Summary: TLS handshake is not accepted
Product: konqueror
Version: unspecified
Platform: Debian stable
OS/Version: Linux
Status: UNCONFIRMED
Severity: normal
Priority: NOR
Component: general
AssignedTo: konq-bugs kde org
ReportedBy: rwenzel dw-itsecurity de
Version: (using KDE KDE 3.3.2)
Installed from: Debian stable Packages
OS: Linux
KDE - Settings - Encryption: SSLv2 is disabled, SSLv3 is enabled, TLS is enabled.
The target server (see https://kis.hosteurope.de) does not accept SSLv3 connections, \
but SSLv2 or TLS connections only. This has been verified using Internet Explorer and \
Ethereal.
However, Konqueror fails to open a TLS connection, but insists on a SSLv3 handshake. \
This fails on the above server. Enabling/Disabling the TLS setting (SSLv3 enabled) \
does not change anything (at least I could not detect a change in the handshake).
Firefox does a funny thing: Even if set to SSLv3 only, it will start a SSLv2 \
handshake and then accepts the TLS connection.
Microsofts Internet Explorer is the only browser that sticks to its settings.
Suggestion: Change the setting "Activate TLS, if server supports it" to "Activate \
TLS" to be consistent with the SSLv2 and SSLv3 settings. As it is now, disabling \
SSLv3 and SSLv2, but enabling TLS will yield in a SSLv2 connection.
Best regards,
roland
_______________________________________________
Konq-bugs mailing list
Konq-bugs@mail.kde.org
https://mail.kde.org/mailman/listinfo/konq-bugs
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic