Re: [Evolution] TLS handshake

[Pete Biggs <pete biggs org uk>]

On Mon, 2021-05-24 at 07:27 +1000, Dean Davis wrote:
> Hi
>
> upgraded Fedora 33 to 34, On opening evolution can not connect to EWS
> account without a SSL Certificate for Blah is not Trusted.
>
>
> Reason: Error performing TLS handshake: One of the involved
> algorithms has insufficient security level.
>
> The reported error was “Error performing TLS handshake: One of the
> involved algorithms has insufficient security level.”.
I'm sort of surprised it happened on moving from 33 to 34 because the
major change in crypto stuff was 32->33.  But perhaps it was some
change at the server level.

As with all crypto stuff you need to really understand what you are
doing otherwise you can leave your system in a vulnerable state.  You
are the only person who decide how exposed your system is and what the
consequences of changing things are. 

You could try modifying the policies to an older version with something
like 

  update-crypto-policies --set DEFAULT:FEDORA32

(you need to be root to do this). You will probably need to restart
evolution after doing this. This is only a work around. Ultimately you
need to tell your provider to update the algorithms they use to support
TLS1.2 

You can restore the correct crypto settings using 

  update-crypto-policies --set DEFAULT

P.