For whatever it is worth, using the same cipher suite on the servers (each running sid), gnutls3 chooses this when talking to nginx-1.4.1:
- Description: (TLS1.2-PKIX)-(ECDHE-RSA-SECP256R1)-(AES-256-GCM)-(AEAD) but this when talking to apache2.4: - Description: (TLS1.2-PKIX)-(ECDHE-RSA-SECP256R1)-(AES-128-CBC)-(SHA1) Both ought to negotiate the former, mainly due to GCM and AEAD. Sid's gnutls2 negotiates the same suites, but gnutls2 doesn't have the nice Description output which gnutls3 has. -JimC -- James Cloos <cl...@jhcloos.com> OpenPGP: 1024D/ED7DAEA6 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
