<div dir="ltr">Hi!<div><br></div><div class="gmail_extra"><br><div class="gmail_quote">2016-07-13 17:27 GMT+02:00 André Cruz <span dir="ltr"><<a href="mailto:andre@cabine.org" target="_blank">andre@cabine.org</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello Fred.<br>
<span class=""><br>
> On 13 Jul 2016, at 14:41, Fred Hebert <<a href="mailto:mononcqc@ferd.ca">mononcqc@ferd.ca</a>> wrote:<br>
><br>
> On 07/12, André Cruz wrote:<br>
>> As can be seen I cannot establish a connection using the container version of Erlang. Looking at the traffic I can see that the ClientHello message specifies SSLv3 ciphers, while the version that works uses TLS1.2. How can I influence this choice of ciphers? Is it a problem with the openssl lib in the container image?<br>
>><br>
><br>
> You should at the very least have some basic configuration of SSL in Erlang -- the one that ships stock isn't particularly great.<br>
<br>
</span>I've found the difference in the default SSL configuration between 18.3.1 and 18.3.2.<br>
<br>
18.3.1 uses TLS1.2 records:<br>
<br>
TLSv1.2 Record Layer: Handshake Protocol: Client Hello<br>
Content Type: Handshake (22)<br>
Version: TLS 1.0 (0x0301)<br>
Length: 279<br>
<br>
<br>
18.3.2 uses SSL records:<br>
<br>
SSL Record Layer: Handshake Protocol: Client Hello<br>
Content Type: Handshake (22)<br>
Version: TLS 1.0 (0x0301)<br>
Length: 249<br>
<br>
It's strange to change this default in a minor version upgrade. Is this something that can be configured? I've found that some SSL servers drop the connection immediately when SSL records are used.<br>
<br></blockquote><div><br></div><div>Huum ... I think this was suppose to be a bug fix, maybe I got it wrong I will investigate.</div><div><br></div><div>Regards Ingela Erlang/OTP team - Ericsson AB</div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Thanks,<br>
André<br>
<div class="HOEnZb"><div class="h5">______________________________<wbr>_________________<br>
erlang-questions mailing list<br>
<a href="mailto:erlang-questions@erlang.org">erlang-questions@erlang.org</a><br>
<a href="http://erlang.org/mailman/listinfo/erlang-questions" rel="noreferrer" target="_blank">http://erlang.org/mailman/<wbr>listinfo/erlang-questions</a><br>
</div></div></blockquote></div><br></div></div>