brent timothy saner on 22 Jul 2015 12:31:39 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Thunderbird 38.1.0 and insecure cyphers (Logjam)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 07/22/2015 03:24 PM, Keith C. Perry wrote:
> Would testing with another mail client be helpful?  Eudora or Zimbra Desktop should work enough for you to confirm the quality of the certificate.
> 
> Some iptables rules might help you test with the Qualsys SSL tool (i.e. port forward 443 to 993)

no need. you can verify a cert with openssl's s_client.
http://www.cyberciti.biz/faq/test-ssl-certificates-diagnosis-ssl-certificate/
has the long version (by the way, throw an "echo | " at the beginning so
it doesn't hang at the end)


or, if you're looking to get only a list of supported ciphers from the
server:

nmap --script ssl-enum-ciphers -p<MAIL PORT> <MAIL HOST>

script here: http://nmap.org/svn/scripts/ssl-enum-ciphers.nse
info here: http://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html

etc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=GqD6
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug