CVE-2019-20372

2020-10-05 Thread Frank Liu
Hi, CVE-2019-20372 mentioned a security vulnerability, but I don't see it in http://nginx.org/en/security_advisories.html CVE-2019-20372 did say a fix in nginx 1.17.7. When I check the CHANGES , I see bugfix: *) Bugfix: requests with bodies were handled inco

Re: SSL routines:tls_process_client_hello:version too low

2020-10-05 Thread Anna Lewis
Hi, Can you please remove me from this mailing list? I'm not sure how I got added. Thanks, Anna On Mon, Oct 5, 2020 at 5:39 AM Francis Daly wrote: > On Wed, Sep 30, 2020 at 04:39:03PM -0400, jriker1 wrote: > > Hi there, > > > Not sure if they are relevant but went thru the entire log. Found t

Re: SSL routines:tls_process_client_hello:version too low

2020-10-05 Thread Francis Daly
On Wed, Sep 30, 2020 at 04:39:03PM -0400, jriker1 wrote: Hi there, > Not sure if they are relevant but went thru the entire log. Found these > references. Guessing related but not sure they tell me personally > anything: These logs do seem to indicate that the tls-negotiation part of things i