0 *H÷
01 0+0 *H÷
¬Content-Type: multipart/alternative;
boundary="--=_NextPart_EE_084856219.332660352"
----=_NextPart_EE_084856219.332660352
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
I have found that I have to have triple-des enabled on the admin server a=
nd the directory instance for the admin server to work with the director=
y server otherwise I get that error.
=C2=A0
From:
389-users-bounces=40lists.fedoraproject.org =5Bmailto:389-users-bo=
unces=40lists.fedoraproject.org=5D On Behalf Of Darcy Hodgson
Sent: Friday, 19 July, 2013 8:43 AM
To:
389-users=40lists.fedoraproject.org
Subject: =5B389-users=5D Fwd: Some cipher suites not working
=C2=A0
Hello,
I have been setting up SSL/TLS with 389 DS on CentOS 6.4. I have been ab=
le to get it working and can connect with LDAPS. However when I started t=
o disabled some of the ciphers I noticed that my server wasn't accepting=
any of the DHE ciphers. I enabled all the ciphers with +all and used ss=
lmap to confirm that the server was only choosing RSA.
I checked the logs and the only thing they say is =22Cannot communicate s=
ecurely with peer: no common encryption algorithm(s).=22
Any help getting the DHE ciphers to work or pointing me to some document=
ation would be appreciated.
Thanks,
Darcy
=C2=A0
=C2=A0
=C2=A0
=C2=A0
----=_NextPart_EE_084856219.332660352
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D=22urn:schemas-microsoft-com:vml=22 xmlns:o=3D=22urn:sch=
emas-microsoft-com:office:office=22 xmlns:w=3D=22urn:schemas-microsoft-c=
om:office:word=22
xmlns:m=3D=22http://schemas.microsoft.com/office/2004/=
12/omml=22
xmlns=3D=22http://www.w3.org/TR/REC-html40=22><head><meta nam=
e=3DGenerator content=3D=22Microsoft Word 14 (filtered medium)=22><style=
<=21--
/* Font Definitions */
=40font-face
=7Bfont-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;=7D
=40font-face
=7Bfont-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;=7D
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
=7Bmargin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:=22Times New Roman=22,=22serif=22;=7D
a:link, span.MsoHyperlink
=7Bmso-style-priority:99;
color:blue;
text-decoration:underline;=7D
a:visited, span.MsoHyperlinkFollowed
=7Bmso-style-priority:99;
color:purple;
text-decoration:underline;=7D
span.EmailStyle17
=7Bmso-style-type:personal-reply;
font-family:=22Calibri=22,=22sans-serif=22;
color:=231F497D;=7D
=2EMsoChpDefault
=7Bmso-style-type:export-only;
font-family:=22Calibri=22,=22sans-serif=22;=7D
=40page WordSection1
=7Bsize:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;=7D
div.WordSection1
=7Bpage:WordSection1;=7D
--></style><=21--=5Bif gte mso 9=5D><xml>
<o:shapedefaults v:ext=3D=22edit=22 spidmax=3D=221026=22 />
</xml><=21=5Bendif=5D--><=21--=5Bif gte mso 9=5D><xml>
<o:shapelayout v:ext=3D=22edit=22>
<o:idmap v:ext=3D=22edit=22 data=3D=221=22 />
</o:shapelayout></xml><=21=5Bendif=5D--></head><body
lang=3DEN-US link=3D=
blue vlink=3Dpurple><div class=3DWordSection1><p
class=3DMsoNormal><span=
style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;co=
lor:=231F497D'>I have found that I have to have triple-des enabled on th=
e admin server and the directory instance for the admin server to work w=
ith the directory server otherwise I get that
error.<o:p></o:p></span></=
p><p class=3DMsoNormal><span
style=3D'font-size:11.0pt;font-family:=22Ca=
libri=22,=22sans-serif=22;color:=231F497D'><o:p> </o:p></span></p><=
p class=3DMsoNormal><b><span
style=3D'font-size:10.0pt;font-family:=22Ta=
homa=22,=22sans-serif=22'>From:</span></b><span
style=3D'font-size:10.0p=
t;font-family:=22Tahoma=22,=22sans-serif=22'> 389-users-bounces=40lists.=
fedoraproject.org =5Bmailto:389-users-bounces=40lists.fedoraproject.org=5D=
<b>On Behalf Of </b>Darcy Hodgson<br><b>Sent:</b> Friday,
19 July, 2013=
8:43 AM<br><b>To:</b>
389-users=40lists.fedoraproject.org<br><b>Subject=
:</b> =5B389-users=5D Fwd: Some cipher suites not
working<o:p></o:p></sp=
an></p><p
class=3DMsoNormal><o:p> </o:p></p><div><p
class=3DMsoNorm=
al>Hello,<br><br>I have been setting up SSL/TLS with 389 DS on CentOS 6.=
4. I have been able to get it working and can connect with LDAPS. Howeve=
r when I started to disabled some of the ciphers I noticed that my serve=
r wasn't accepting any of the DHE ciphers. I enabled all the ciphers wit=
h +all and used sslmap to confirm that the server was only choosing RSA.=
<br><br>I checked the logs and the only thing they say is "Cannot
c=
ommunicate securely with peer: no common encryption algorithm(s)."<=
br><br>Any help getting the DHE ciphers to work or pointing me to some d=
ocumentation would be
appreciated.<br><br><br>Thanks,<br><br>Darcy<o:p><=
/o:p></p><div><div><div><div><div><div><div><p
class=3DMsoNormal><o:p>&n=
bsp;</o:p></p></div><div><p
class=3DMsoNormal><o:p> </o:p></p></div=
</div></div></div></div><p
class=3DMsoNormal><o:p> </o:p></p></div=
</div><p
class=3DMsoNormal><o:p> </o:p></p></div></div></body></ht=
ml>
----=_NextPart_EE_084856219.332660352--