<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
I want to use stunnel with TLSv1.2 ciphers but it doesn't work.<br>
I use stunnel 5.07 compiled from source with prefix /opt/stunnel and
lastest openssl (1.0.1j)<br>
<br>
This is my main configuration file:<br>
<br>
chroot = /opt/stunnel/var/lib/stunnel/<br>
pid = /stunnel4.pid<br>
<b></b>cert = /opt/stunnel/etc/blabla/bla.pem<br>
key = /opt/stunnel/etc/blabla/bla.key<br>
ciphers = ECDHE-ECDSA-AES256-GCM-SHA384<br>
options = NO_SSLv2<br>
[imaps]<br>
accept = 993<br>
connect = 143<br>
<br>
I had to use one of this ciphers:<br>
ECDHE-ECDSA-AES256-GCM-SHA384<br>
ECDHE-ECDSA-AES256-SHA384<br>
DHE-RSA-AES256-GCM-SHA384<br>
<br>
When i tried to use imaps connection over stunnel :<br>
root@bla: imtest -a homer -w homer -p 993 -s localhost <br>
SSL_connect error 0<br>
SSL session removed<br>
failure: TLS negotiation failed<br>
<br>
if i use a SSLv3 cipher it works.<br>
root@bla: imtest -a homer -w homer -p 993 -s
localhost <br>
verify error:num=18:self signed certificate<br>
TLS connection established: TLSv1 with cipher DHE-RSA-AES128-SHA
(128/128 bits)<br>
<br>
<br>
Someone have any idea ?<br>
Thanks.<br>
Jeremy<br>
</body>
</html>