[lug] Colorado Bureau of Investigation

[Robert Racansky]

On Tue, Jan 27, 2015 at 1:55 PM, Jeffrey S. Haemer
<jeffrey.haemer at gmail.com> wrote:
> Robert,
>
> Try it now. Should work.
>


Yeah, it's been working since at least Monday (I didn't check over the weekend):


On Friday, the output of
openssl s_client -connect ccic.state.co.us:443
indicated that the connection protocol was SSLv3 :


CONNECTED(00000003)

---
No client certificate CA names sent
---
SSL handshake has read 4387 bytes and written 344 bytes
---
New, TLSv1/SSLv3, Cipher is EDH-RSA-DES-CBC3-SHA
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
     Protocol  : SSLv3
     Cipher    : EDH-RSA-DES-CBC3-SHA
     Session-ID:
54C2BE7C2B698A71F4EFE12F3B3EFBB9E93BF051EE17F53827E8C0A7D22D47B8
     Session-ID-ctx:
     Master-Key:
E202C00B9908BE72E858D71E1C5BD2665C0F2BE044E4A8964F5F04DD997F9BA0E2351EF56567B7D81D0B37F6EC209952
     Key-Arg   : None
     Start Time: 1422048892
     Timeout   : 300 (sec)
     Verify return code: 0 (ok)
 ---





On Monday morning, it was TLSv1 :


SSL handshake has read 4363 bytes and written 495 bytes
---
New, TLSv1/SSLv3, Cipher is EDH-RSA-DES-CBC3-SHA
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : EDH-RSA-DES-CBC3-SHA
    Session-ID: 54C6793DFB9ECDB66005628335FBC7C1B802946701FAD675A322BE87D8E162FB
    Session-ID-ctx:
    Master-Key:
2074512C91DEA76BDAEFB94496D77C2CF8B310BBAAB7A31F5E47AD1A648E38813770630674A000078A4E932F58E0254D
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1422293309