Re: pecl.php.net prevents legacy connections

indeed May be stricter for the dev/admin area tho, leaving the installer parts more flexible :) On Tue, Mar 31, 2015 at 3:18 PM, Marius Cramer <m.cramer@pixcept.de> wrote: > Might be. But I think currently it's better to use "intermediate" option > instead of "modern" to not lock out too much clients ;-) > > Am 30.03.2015 um 18:48 schrieb Pierre Joye: >> It is actually the default wheezy afaict >> >> >> On Mon, Mar 30, 2015, 10:57 PM Hannes Magnusson >> <hannes.magnusson@gmail.com >> <mailto:hannes.magnusson@gmail.com>> wrote: >> >> Thanks for the headsup! >> >> The service was being moved to new server and the person doing the >> move took the strictest settings from >> >> https://mozilla.github.io/__server-side-tls/ssl-config-__generator/ >> <  >> ½Ñ=$šÓL®T¢ https://mozilla.github.io/server-side-tls/ssl-config-generator/> >> >> Try now please. >> >> -Hannes >> >> >> On Mon, Mar 30, 2015 at 6:45 AM, Marius Cramer <m.cramer@pixcept.de >> <mailto:m.cramer@pixcept.de>> wrote: >> > Dear webmaster, >> > >> > I don't know if you are aware of the fact, that all the legacy >> > distributions, that still use (patched) openssl0.9 are no longer >> able to >> > connect to pecl.php.net >> > <http://pecl.php.net> due to the strict >> TLS configuration. >> > This affects the LTS version of debian squeeze too. It is not possible >> > to use commands like pecl install / pear install because of that. >> > In addition it is not possible to download packages via wget on those >> > servers because of the mismatching cipher suite. >> > >> > Have a look here: >> > >> >> https://www.ssllabs.com/__ssltest/analyze.html?d=pecl.__php.net&s=104.236.228.160 >> >> <https://www.ssllabs.com/ssltest/analyze.html?d=pecl.php.net&s=104.236.228.160> >> > >> > ... >> > OpenSSL 0.9.8y Protocol or cipher suite mismatch >> > ... >> > >> > Please re-think about the server config excluding those - still >> > frequently used - legacy distributions. >> > >> > Thank you >> > Marius Cramer >> > >> > -- >> > Marius Cramer >> > >> > pixcept KG >> > Trierer Str. 54 >> > 56072 Koblenz >> > >> > Tel.: 0261 - 207 38 19 >> > Fax: 0261 - 207 38 18 >> > eMail: m.cramer@pixcept.de >> > <mailto:m.cramer@pixcept.de> >> > inet: www.pixcept.de <http://www.pixcept.de> >> > >> > Komplementär: Marius Cramer >> > Steuernummer: 22/201/0215/2 >> > Eingetragen beim Amtsgericht Koblenz, HRA 20390 >> > >> >> -- >> PHP Webmaster List Mailing List (http://www.php.net/) >> To unsubscribe, visit: http://www.php.net/unsub.php >> > > -- > Marius Cramer > > pixcept KG > Trierer Str. 54 > 56072 Koblenz > > Tel.: 0261 - 207 38 19 > Fax: 0261 - 207 38 18 > eMail: m.cramer@pixcept.de > inet: www.pixcept.de > > Komplementär: Marius Cramer > Steuernummer: 22/201/0215/2 > Eingetragen beim Amtsgericht Koblenz, HRA 20390 > -- Pierre @pierrejoye | http://www.libgd.org