After upgrading to ESA 9.6: SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher

[Borje Bremnes]

Hi

After upgrading to ESA 9.6 all email from google/gmail failed with "SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher" in the log. In the config i have "RC4-SHA:RC4-MD5:ALL" ciphers. This is the default settings, since I never have changed anything here.

Anyone know what I should have in my config to receive TLS email from google and everyone else? Btw this worked in version 8.5.6.

Best regards

Børje

[Robert Sherwin · Accepted solution]

Please see the following:

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200025-9-5-and-newer-AsyncOS-for-Email-Security.html

-Robert

[Borje Bremnes]

Hi

I thought I had replaced the demo certificate everywhere a long time ago, but obviously missed one of the settings....

My bad...

Thank you for the help

Best regards

Børje