Just found out that my cipher

h_peter — Sun, 01 Nov 2015 19:31:53 +0000

Just found out that my cipher suite only included TLSv1.2 compatible ciphers for my version of openssl. Now using EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH thanks to https://cipherli.st :)

Here is the relevant part of

h_peter — Sun, 01 Nov 2015 18:50:34 +0000

Here is the relevant part of the configuration. I left the protocol_options at their default value.

listen:
  - 
    port: 5222
    module: ejabberd_c2s
    max_stanza_size: 65536
    shaper: c2s_shaper
    access: c2s
    starttls: true
    starttls_required: true
    certfile: "[my certfile]"
    dhfile: "[my dhfile]"
    ciphers: "HIGH:!SHA1:!MD5:!RC4:!ADH"
    tls_compression: false
    ## Custom OpenSSL options
    ##
    # protocol_options:
    ##  - "no_sslv3"
    ##   - "no_tlsv1"

Any ideas how to enable TLSv1 and/or TLSv1.1?

ejabberd - Comments for "[solved] Only TLS v1.2 enabled, no TLS v1 or 1.1"

Just found out that my cipher

Here is the relevant part of