Re: Fedora 29 - Interaction with TLSv1/SSLv3 completely broken

2019-03-05 Thread Charles Kozler
> On Mon, 4 Mar 2019 at 09:14, Charles Kozler > > > > Recent curl has --tlsv1.2 and --tlsv1.3 options. Do these allow you to > connect to github? > > There is a TLDNR discussion of policy management at > https://lists.fedoraproject.org/archives/list/devel@lis

Re: Fedora 29 - Interaction with TLSv1/SSLv3 completely broken

2019-03-05 Thread Charles Kozler
> On 3/4/19 3:16 PM, Charles Kozler wrote: > > > That's complicated. > https://blog.cloudflare.com/why-tls-1-3-isnt-in-browsers-yet/ > > See also section 2.2.3 of > https://tools.ietf.org/id/draft-camwinget-tls-use-cases-03.html > > We might be able to

Re: Fedora 29 - Interaction with TLSv1/SSLv3 completely broken

2019-03-04 Thread Charles Kozler
> on ipleak.net, i get fallback failed, do you get that too? i am chasing > dns/ip leak after openvpn install. it IS a challenge. > > On Mon, Mar 4, 2019 at 5:13 AM Charles Kozler wrote: I will check tomorrow AM ___ users mailing l

Re: Fedora 29 - Interaction with TLSv1/SSLv3 completely broken

2019-03-04 Thread Charles Kozler
> On 3/4/19 5:13 AM, Charles Kozler wrote: > > > I can't reproduce problems with those commands.  Are you working in a > site that uses TLS traffic inspection?  If so, that would explain the > problem.  Traffic inspection services that haven't been updated to >

Fedora 29 - Interaction with TLSv1/SSLv3 completely broken

2019-03-04 Thread Charles Kozler
I am hoping I am missing something fairly obvious but it would appear any interaction via command line (or if overridden by another application policy) with a site presenting TLSv1/SSLv3 initially is completely broken in F29 Since I upgraded to F29, any site I come across via SSL functionality (