Рубрики
ssl \ certificate

ssl \ ssl_choose_client_version:unsupported protocol \ routines:tls_process_ske_dhe:dh key too small

Ссылки:

https://sysadminfaq.ru/linux/centos-8.-pyodbc-mssql-ssl-error
Ошибка SSL dh key too small
https://stackoverflow.com/questions/53058362/how-do-i-manage-the-error-openssl-v1-1-1-ssl-choose-client-version-unsupported

Ошибка ssl_choose_client_version:unsupported protoco

[root@proxy2 squid]# curl https://bill.comfortel.pro
curl: (35) error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol

Вариант решения:
vim /etc/crypto-policies/back-ends/opensslcnf.config
Выставить\Изменить MinProtocol = TLSv1.0

Ошибка tls_process_ske_dhe:dh key too small

curl https://site.url.ru                     
    curl: (35) error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small


Вариант решения:
update-crypto-policies --set LEGACY