Bug 1289124

Summary:	mailx secure send option does not support TLSv1.1 or TLSv1.2
Product:	Red Hat Enterprise Linux 6	Reporter:	Martin Poole <mpoole>
Component:	mailx	Assignee:	Nikola Forró <nforro>
Status:	CLOSED DUPLICATE	QA Contact:	qe-baseos-daemons
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.7	CC:	salmy
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-12-08 09:38:41 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1253743, 1310222

Description Martin Poole 2015-12-07 13:46:30 UTC

Description of problem:

mailx secure send option does not support TLSv1.1 or TLSv1.2

Version-Release number of selected component (if applicable):

mailx-12.4-8.el6_6


mailx -t -S smtp=smtps://rhel7-64.example.com:465 -S nss-config-dir=/etc/pki/nssdb


SSL/TLS handshake failed: Peer reports incompatible or unsupported protocol version.


Server

openssl s_server -cert ./rhel7-64.example.com.pem -key ./rhel7-64.example.com.key.nopw -accept 465 -tls1_2

Comment 2 Martin Poole 2015-12-07 17:33:28 UTC

This appears to be resolved with the updated NSS packages from

   Enable TLS 1.2 as the default in nss
   https://bugzilla.redhat.com/show_bug.cgi?id=1272504

Comment 3 Nikola Forró 2015-12-08 09:38:41 UTC

(In reply to Martin Poole from comment #2)
> This appears to be resolved with the updated NSS packages from
> 
>    Enable TLS 1.2 as the default in nss
>    https://bugzilla.redhat.com/show_bug.cgi?id=1272504
Yes, updating nss fixes this for me too. I'm closing this as NOTABUG.