Search found 23 matches

by BrianSBoyd
2014-11-21 01:00
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Many thanks for the quick reply. -Brian
by BrianSBoyd
2014-11-20 19:00
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Hi,

Can you point us to documentation that allows us to leverage this new ability to disable weak ciphers?

Does this also include ability to disable plain text authentication?

Thanks,
Brian
by BrianSBoyd
2014-11-20 01:28
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Version 5.6 - Build 2145 (2014-11-13) - Production

Thanks!
by BrianSBoyd
2014-11-12 18:46
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Great to hear, Martin! Thanks for all of your work and the work of your team.

Brian
by BrianSBoyd
2014-11-11 19:19
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Apologies, does it look like v5.6 will be promoted to Production by the 'Fourth Thursday in November (USA)' [Nov 27th]? Thanks .. Brian
by BrianSBoyd
2014-11-07 19:14
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Hi Martin,

We're nearing the date when we have to make a go/no-go decision with hMailServer.

Does it look like v5.6 will be promoted to Production by Thanksgiving?

Thanks,
Brian
by BrianSBoyd
2014-10-20 00:33
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Thanks, unfortunately beta isn't good enough (as related previously in this post). Looking forward to the Production release.
by BrianSBoyd
2014-10-19 20:32
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Thanks mattg. Any date for v5.6? This release has the features that we need to continue using hMailServer.
by BrianSBoyd
2014-10-17 00:40
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Hi Martin,

With SSLV3 becoming an even greater concern, is progress being made on this version of hMailServer to disable weak ciphers via config?

Thanks!

Brian
by BrianSBoyd
2014-09-25 17:55
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Hi Martin, Thanks for the info. Our timeline is to have this installed and thoroughly tested within all of our environments by the end of year. Given Thanksgiving and the New Year holidays, we figure that early November would be the absolute latest that would work for us. We'll check back in October...
by BrianSBoyd
2014-09-24 23:46
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Hi Martin,

Does it still seem that there will be a new Production release in October with the ability to configure to not support Weak SSL Ciphers?

Thanks,
Brian
by BrianSBoyd
2014-08-11 05:55
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Great to hear, thanks.
by BrianSBoyd
2014-08-06 23:05
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Thanks Martin. We'll wait until it's been certified as a Production build. Our time frame is October, does a Production release seem likely by then?
by BrianSBoyd
2014-08-06 17:03
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Excellent, thanks! (New release by year-end?)
by BrianSBoyd
2014-07-03 18:42
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Thanks Leathwood, we may have to go this route.

And thanks Bill: we ultimately hope that, within the next couple of months, you'll be able to sync up these changes with Martin's so that we can move forward with an official Production release.

Cheers,
Brian
by BrianSBoyd
2014-06-10 21:32
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Hi Bill, Given how we otherwise encrypt our content, independent of hMail, our Information Security Officer agreed to a temporary security exception. It is our hope that your INI changes will be integrated into a production build within the next few months. If this doesn't happen, then we'll revisit...
by BrianSBoyd
2014-06-05 20:07
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Hi Bill, We're holding a meeting this afternoon (we're on the West Coast) with other stakeholders to decide our next steps. One possibility that I see is that we get a copy of the latest source code and modify it ourselves: rather than going through the more involved process of INI support, we would...
by BrianSBoyd
2014-06-03 23:28
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Thanks for making the process clear, we'll take it from here. Cheers ... Brian
by BrianSBoyd
2014-06-03 18:05
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Thanks for your quick responses. We won't get approval for using experimental builds in production, and we need to disable these weak ciphers for DTAAP certification. I know you say that you have no idea, but is it possible that this could be added within an official release within two months?
by BrianSBoyd
2014-06-02 22:25
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

p.s. We're running a production server processing thousands of messages each day, so 'experimental builds' won't work for us.
by BrianSBoyd
2014-06-02 22:20
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Doh! Sorry about that, here's the actual link:

http://www.hmailserver.com/forum/viewto ... 56#p159071
by BrianSBoyd
2014-06-02 22:05
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Thanks for your reply! Will the OpenSSL config changes suggested in:

http://www.hmailserver.com/forum/viewto ... 39#p162039

address this same issue?

Thanks,
Brian
by BrianSBoyd
2014-06-02 19:59
Forum: Development & alpha discussions
Topic: Weak SSL Ciphers
Replies: 51
Views: 29262

Re: Weak SSL Ciphers

Hi All, The Blog post in ZenOne mentioned below doesn't address our problem: it speaks to IIS configuration, which we've already implemented, and we've confirmed that it doesn't address our hMailServer configuration issues. Is there a way to explicitly disable hMailServer support for weak ciphers th...