References: <20220803105631.77d1cc2c@ncopa-desktop.lan>
 <87iln2cxo3.fsf@ungleich.ch> <CM1BYFL1Z0CV.1N3D8RDVZGD68@sumire>
 <CM1CKNLBCLYI.24J4143ZN5GVQ@sumire> <87lerx7r2v.fsf@ungleich.ch>
 <CM1DK3ZAE2Y8.39QF72R3QZIXW@sumire> <87k07h5wx1.fsf@ungleich.ch>
 <CM1KQ867KH38.2A80PZLFY815T@sumire>
User-agent: mu4e 1.7.27; emacs 28.1
From: Nico Schottelius <nico.schottelius@ungleich.ch>
To: alice <alice@ayaya.dev>
Cc: Nico Schottelius <nico.schottelius@ungleich.ch>, Natanael Copa
 <ncopa@alpinelinux.org>, ~alpine/devel@lists.alpinelinux.org
Subject: Re: OpenSSL 3 pushed to git master
Date: Wed, 10 Aug 2022 09:42:44 +0200
In-reply-to: <CM1KQ867KH38.2A80PZLFY815T@sumire>
Message-ID: <8735e45yqa.fsf@ungleich.ch>
MIME-Version: 1.0
Content-Type: text/plain


Hey Alice,

"alice" <alice@ayaya.dev> writes:

> On Tue Aug 9, 2022 at 11:22 AM CEST, Nico Schottelius wrote:
>>
>> I verified three times that the content is correct - is it possible that
>> not every app linked against openssl actually loads the configuration
>> file?
> seems some don't. i was naive..

Same same ...

> however: `openconnect --allow-insecure-crypto` seems to work for me (no
> more insecure renegotiation message).

... after suggesting apps should have that, the one app that fails does
actually have the i-am-sure-insecure-is-fine-with-me flag.

And as you said, it actually works.

Meanwhile, I have raised an issue with the VPN provider, but my
expectation is that it won't be fixed that soon.

Best regards,

Nico

--
Sustainable and modern Infrastructures by ungleich.ch