Forum Discussion
SAMFS
Apr 24, 2024Copper Contributor
How to configure cipher suites for STARTTLS?
I configured the available cipher suites for an Exchange 2013 server as described here in the best practice document by putting them into the appropriate registry key: HKLM:\SYSTEM\CurrentControlSe...
Andres-Bohren
Apr 26, 2024Steel Contributor
Hi SAMFS
I've captured the Traffic from an openssl STARTTLS Test
openssl s_client -starttls smtp -connect mail.icewolf.ch:25
After STARTTLS and the Server Responding 220
The client sends a List of Cipher Suites it supports
Then the Server picks one
Similar to HTTPS
Kind Regards
Andres
SAMFS
Apr 29, 2024Copper Contributor
Hi Andres-Bohren!
Yes, that's what I did, too. The problem is that our Exchange server, after sending the STARTTLS command, does not offer the cipher suites that are listed in the above mentioned registry key, but a different set. And I don't know why it behaves like that.