RE: Status of GUAM and TLS>1.1 ?

Hi.

I do not know if guam uses dynamic linking to openssl or other such cryptolibrary (I would seriously hope so), but tls1.3 isnt exactly out of the draft phase just yet. As for wether guam can use whatever ciphers the cryptolibrary offers (re: to the question of tls1.2), I have not personally tested this actually since I use syncroton for main box connectivity (which uses apache as the frontend, thus whatever ciphers apache offers). Other insights and/or documentation about this would be nice though, since guam is documented practically in absolutely no way so we are left to looking at the code and figuring out how it functions. I lately filed an issue (not exactly officially or through an issue tracker...) about the default cyrus and guam config being somewhat nonsensical in regards to kolab as a system.

# UNIX sockets start with a slash and are put into /var/lib/imap/sockets

SERVICES {

imap cmd="imapd" listen="localhost:9143" prefork=5

imaps cmd="imapd -s" listen="localhost:9993" prefork=5

sieve cmd="timsieved" listen="sieve" prefork=0

ptloader cmd="ptloader" listen="/var/lib/imap/ptclient/ptsock" prefork=0

lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1

notify cmd="notifyd" listen="/var/lib/imap/socket/notify" proto="udp" prefork=1

}

This is how cyrus.conf should look like.

%% Example configuration for Guam.

[

{

kolab_guam, [

{

imap_servers, [

{

imap, [

{ host, "127.0.0.1" },

{ port, 9143 },

{ tls, starttls }

]

},

{

imaps, [

{ host, "127.0.0.1" },

{ port, 9993 },

{ tls, true }

]

}

]

},

{

And this is how the first part of guam sys.config should look like. I did not however find _anything_ pertaining to crypto configurations anywhere. tls_config in the listeners section (not in my snippet) is the interesting part in regards to guam but I honestly did not bother digging through the code to figure out if there were other sections configurable there.

-Jupiter ‘zapotah’ Vuorikoski

From: Matthias Busch
Sent: Friday, 10 August 2018 19.03
To: [email protected]
Subject: Status of GUAM and TLS>1.1 ?

_______________________________________________
users mailing list
[email protected]
https://lists.kolab.org/mailman/listinfo/users