<div dir="ltr"><div class="gmail_quote">On Tue, Oct 14, 2008 at 10:48 PM, Peter Saint-Andre <span dir="ltr"><<a href="mailto:stpeter@stpeter.im">stpeter@stpeter.im</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> <div class="Ih2E3d">And TLS 1.1 is defined in RFC 4346:<br></div> </blockquote><div><br></div><div>As version 3.2 :-)</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Do you know what SSL/TLS software each of those uses? I remember seeing<br> something on the jabberd2 list recently about pulling out Cyrus SASL,<br> but I don't know what SSL/TLS software it uses, nor what version of that<br> software.<br></blockquote></div><div><br></div>yea, Cyrus was used for SASL, it's now GnuSASL.  It uses openssl for ssl, but there's a line of code that forces TLSv1 usage.<div><br></div><div>I'm not sure what Openfire uses, but I'm betting it's plain java, which probably uses the system libraries, so the server I'm having problems with might just have (really) old libraries installed.<br clear="all"> <br>-- <br>- Norman Rasmussen<br> - Email: <a href="mailto:norman@rasmussen.co.za">norman@rasmussen.co.za</a><br> - Home page: <a href="http://norman.rasmussen.co.za/">http://norman.rasmussen.co.za/</a><br> </div></div>