Re: pecl.php.net prevents legacy connections
| From: | Marius Cramer | Date: | Tue, 31 Mar 2015 08:18:41 +0000 |
| Subject: | Re: pecl.php.net prevents legacy connections | ||
| References: | 1 2 3 | Groups: | php.webmaster |
| Request: | Send a blank email to php-webmaster+get-20990@lists.php.net to get a copy of this message | ||
Might be. But I think currently it's better to use "intermediate" option
instead of "modern" to not lock out too much clients ;-)
Am 30.03.2015 um 18:48 schrieb Pierre Joye:
> It is actually the default wheezy afaict
>
>
> On Mon, Mar 30, 2015, 10:57 PM Hannes Magnusson
> <hannes.magnusson@gmail.com
> <mailto:hannes.magnusson@gmail.com>> wrote:
>
> Thanks for the headsup!
>
> The service was being moved to new server and the person doing the
> move took the strictest settings from
>
> https://mozilla.github.io/__server-side-tls/ssl-config-__generator/
>
> <https://mozilla.github.io/server-side-tls/ssl-config-generator/>
>
> Try now please.
>
> -Hannes
>
>
> On Mon, Mar 30, 2015 at 6:45 AM, Marius Cramer <m.cramer@pixcept.de
> <mailto:m.cramer@pixcept.de>> wrote:
> > Dear webmaster,
> >
> > I don't know if you are aware of the fact, that all the legacy
> > distributions, that still use (patched) openssl0.9 are no longer
> able to
> > connect to pecl.php.net <http://pecl.php.net>
> > due to the strict
> TLS configuration.
> > This affects the LTS version of debian squeeze too. It is not possible
> > to use commands like pecl install / pear install because of that.
> > In addition it is not possible to download packages via wget on those
> > servers because of the mismatching cipher suite.
> >
> > Have a look here:
> >
>
> https://www.ssllabs.com/__ssltest/analyze.html?d=pecl.__php.net&s=104.236.228.160
>
> <https://www.ssllabs.com/ssltest/analyze.html?d=pecl.php.net&s=104.236.228.160ÚXË=
O
> ÛkîVM› I>
> >
> > ...
> > OpenSSL 0.9.8y Protocol or cipher suite mismatch
> > ...
> >
> > Please re-think about the server config excluding those - still
> > frequently used - legacy distributions.
> >
> > Thank you
> > Marius Cramer
> >
> > --
> > Marius Cramer
> >
> > pixcept KG
> > Trierer Str. 54
> > 56072 Koblenz
> >
> > Tel.: 0261 - 207 38 19
> > Fax: 0261 - 207 38 18
> > eMail: m.cramer@pixcept.de
> > <mailto:m.cramer@pixcept.de>
> > inet: www.pixcept.de <http://www.pixcept.de>
> >
> > Komplementär: Marius Cramer
> > Steuernummer: 22/201/0215/2
> > Eingetragen beim Amtsgericht Koblenz, HRA 20390
> >
>
> --
> PHP Webmaster List Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
--
Marius Cramer
pixcept KG
Trierer Str. 54
56072 Koblenz
Tel.: 0261 - 207 38 19
Fax: 0261 - 207 38 18
eMail: m.cramer@pixcept.de
inet: www.pixcept.de
Komplementär: Marius Cramer
Steuernummer: 22/201/0215/2
Eingetragen beim Amtsgericht Koblenz, HRA 20390
Attachment: [application/pkcs7-signature] S/MIME Cryptographic Signature smime.p7s
Attachment: [application/pkcs7-signature] S/MIME Cryptographic Signature smime.p7s