On 03/03/2016 11:58 AM, Daniel Franciscus wrote:
SSL3 is disabled. SSL2 is the preferred and then TLS.
Is SSLv2
is enabled on your server? It should be completely disabled.
What is the version of your server?
$ rpm -q 389-ds-base
Please note that SSL v3 was disabled since 1.3.3.6-1.
- Ticket 47928 - Disable SSL v3, by default.
And so is in the Windows Console.
What does your cn=encryption,cn=config entry look?
Thanks.
Dan Franciscus
Systems Administrator
Information Technology Group
Institute for Advanced Study
609-734-8138
------------------------------------------------------------------------
*From: *"Noriko Hosoi" <nhosoi(a)redhat.com>
*To: *389-users(a)lists.fedoraproject.org
*Sent: *Wednesday, March 2, 2016 5:03:56 PM
*Subject: *[389-users] Re: Unable to connect to Admin server via 389
windows console
Could you please double check your Directory Server is configured with
SSLv3 disabled?
http://www.port389.org/docs/389ds/howto/howto-disable-sslv3.html
On 03/02/2016 01:35 PM, Daniel Franciscus wrote:
OK, new error now after upgrading:
Unable to create ssl socket
org.mozilla.jss.ssl.SSLSocketException: SSL_ForceHandshake failed:
(-12279) Peer using unsupported version of security protocol.
at org.mozilla.jss.ssl.SSLSocket.forceHandshake(Native Method)
at com.netscape.management.client.comm.HttpsChannel.open(Unknown
Source)
at com.netscape.management.client.comm.CommManager.send(Unknown
Source)
at com.netscape.management.client.comm.HttpManager.get(Unknown Source)
at
com.netscape.management.client.console.Console.invoke_task(Unknown
Source)
at
com.netscape.management.client.console.Console.authenticate_user(Unknown
Source)
at com.netscape.management.client.console.Console.<init>(Unknown
Source)
at com.netscape.management.client.console.Console.main(Unknown Source)
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
Dan Franciscus
Systems Administrator
Information Technology Group
Institute for Advanced Study
609-734-8138