Search found 11 matches

by raidensnake
2018-11-28 13:04
Forum: Development & alpha discussions
Topic: TLS 1.3 Support
Replies: 4
Views: 6618

Re: TLS 1.3 Support

IMHO: Our best bet to get TLS 1.3 Support for hMailServer is by supporting LibreSSL, because it doesnt require a hMailServer rewrite and the LibreSSL Team allready working on TLS 1.3 support allready. Since I'm not familiar with LibreSSL the main question is do we know if it currently supports TLS1...
by raidensnake
2018-11-26 22:06
Forum: Development & alpha discussions
Topic: New hMailServer x 64 MSI Installer
Replies: 26
Views: 23502

Re: New hMailServer x 64 MSI Installer

Does this use LibreSSL?
by raidensnake
2018-11-26 21:48
Forum: Development & alpha discussions
Topic: TLS 1.3 Support
Replies: 4
Views: 6618

TLS 1.3 Support

I posted a recent github issue here about adding TLS1.3 support.
https://github.com/hmailserver/hmailserver/issues/271

Are there any plans of adding this?
by raidensnake
2018-10-29 08:27
Forum: General discussions
Topic: Need to block Client Initiated Renegotiation
Replies: 12
Views: 10199

Re: Need to block Client Initiated Renegotiation

mattg wrote:
2018-10-23 15:53
Can you explain how you know this to be the case?
pci compliancy probes confirmed this.
by raidensnake
2018-10-23 04:06
Forum: General discussions
Topic: Need to block Client Initiated Renegotiation
Replies: 12
Views: 10199

Re: Need to block Client Initiated Renegotiation

Still any ideas? no one has got back to me in a month...
by raidensnake
2018-09-23 20:13
Forum: General discussions
Topic: Help on applying SSL on hMailServer
Replies: 22
Views: 10901

Re: Help on applying SSL on hMailServer

It's best to leave TLS 1.0 disabled as it's blocked by most mail providers due to PCI Compliancy.
by raidensnake
2018-09-23 13:20
Forum: General discussions
Topic: Need to block Client Initiated Renegotiation
Replies: 12
Views: 10199

Re: Need to block Client Initiated Renegotiation

Any suggestions on how to do that as I'm using vs2017.
by raidensnake
2018-09-23 10:27
Forum: General discussions
Topic: Need to block Client Initiated Renegotiation
Replies: 12
Views: 10199

Re: Need to block Client Initiated Renegotiation

Already tried that before and it still fails due to the renegotiation still being enabled. hmailserver's source is allowing users to renegotiate the connection and ciphers used.
by raidensnake
2018-09-22 10:29
Forum: General discussions
Topic: Need to block Client Initiated Renegotiation
Replies: 12
Views: 10199

Need to block Client Initiated Renegotiation

I ran into an issue with a PCI scan that failed as hmailserver is allowing clients to renegotiate the ssl encryption. Is there any way of disabling it?