On Sun, Sep 24, 2023 at 04:52:13PM +0300, Klemens Nanni wrote: > On Sun, Sep 24, 2023 at 02:21:20PM +0200, Theo Buehler wrote: > > > Perhaps SSL 3.0 or TLS 1.0 or plain text connections work? > > > > They won't. tcltls uses libssl where 3.0 was disabled eons ago and Bob > > disabled 1.0 in Tallinn. > > And libssl does not do TLS 1.1/2/3? That be my interpretation of being > unable to connect to standard XMPP servers in coccinella.
I was only commenting that SSLv3 and TLSv1.0 definitely won't work :) tcltls was updated to the current release about a year ago after the 2011 release broken one time too many by making things in libssl/libcrypto opaque. I would not expect the fault there. tkabber was last updated in 2015 and coccinella in 2011. Go figure. And just for info, TLSv1.3 is the current version, and while TLSv1.2 has a kind of feature freeze (not yet formalized), it will be staying for a long time. SSLv3 is stone dead. TLSv1.0 and TLSv1.1 are MUST NOT use for 2.5 years (RFC 8996) but might still see some use by things that can't be updated. Mail servers (the biggest class holdouts) were fixed by the power of the oligopoly.
