Re: getmail and weakdh.org ssl issue

Hi Charles,

Am 01.01.20 um 18:52 schrieb Charles Cazabon:
> Stefan U. Hegner <[email protected]> wrote:
> [snip: no client SSL config options]
>
> I'm 99% certain then that this is because of the server's certificate.  I
> can't check myself because you've anonymized it.

OK, then I tell you ;-)

It's mail.unseen.is (POP-SSL on Port 995)


> Newer OpenSSL versions dropped support for some insecure
> protocols, but I believe also for some insecure key sizes of other protocols.
> Upgrading to buster got you the newer, more secure OpenSSL.  You may be able
> to configure OpenSSL to allow this certificate (not sure, haven't done it),
> but the best way forward is probably to get the server operator to upgrade
> their certificate.

OK. - So please check server cert of mail.unseen.is. - Thereafter I'm
more then happy to ask their admin to upgrade it.

Thanks again and all the best

Stefan.


-- 
Stefan U. Hegner
         <[email protected]>
              * * *
D-32584 Löhne --- good ole Germany
internet: http://www.hegner-web.de
              * * *
GPG-Key | 048D 7F64 0BEB 73B1 2725
F-Print | C05E 4F77 9674 EF11 55FE

-----BEGIN PGP SIGNATURE-----

iHUEAREIAB0WIQT+GGitkDFcADNIW0vJL5J2DCWe2AUCXgzpUwAKCRDJL5J2DCWe
2Eg+AQDV1pc30QBSoJJxR9t6Ua0ko1x8r9FV5bUFv79CPQXhGwD8CqdnDH5HbHAF
GpISKOcFdt70ricJRxTzDAL4EKBziRY=
=gZD1
-----END PGP SIGNATURE-----