Re: [Evolution] TLS handshake

[Dean Davis <dean_davis withtel com au>]

Hi

thank you,  ( update-crypto-policies --set DEFAULT:FEDORA32 ) worked 

regards

dean

On Sun, 2021-05-23 at 23:01 +0100, Pete Biggs wrote:

On Mon, 2021-05-24 at 07:27 +1000, Dean Davis wrote:

Hi

upgraded Fedora 33 to 34, On opening evolution can not connect to EWS

account without a SSL Certificate for Blah is not Trusted.

Reason: Error performing TLS handshake: One of the involved

algorithms has insufficient security level.

The reported error was “Error performing TLS handshake: One of the

involved algorithms has insufficient security level.”.

I'm sort of surprised it happened on moving from 33 to 34 because the

major change in crypto stuff was 32->33.  But perhaps it was some

change at the server level.

As with all crypto stuff you need to really understand what you are

doing otherwise you can leave your system in a vulnerable state.  You

are the only person who decide how exposed your system is and what the

consequences of changing things are.

You could try modifying the policies to an older version with something

like

  update-crypto-policies --set DEFAULT:FEDORA32

(you need to be root to do this). You will probably need to restart

evolution after doing this. This is only a work around. Ultimately you

need to tell your provider to update the algorithms they use to support

TLS1.2

You can restore the correct crypto settings using

  update-crypto-policies --set DEFAULT

P.

_______________________________________________

evolution-list mailing list

evolution-list gnome org

To change your list options or unsubscribe, visit ...

https://mail.gnome.org/mailman/listinfo/evolution-list