Re: cyradm TLS issues

[email protected]
Newsgroups gmane.mail.imap.cyrus
Message-ID <[email protected]>


SHould be fine on CentOS 7.  Get the cyrus-imapd SRC RPM or build from source.  You need to patch imclient.c since TLS version is hardcoded in. 

--- lib/imclient.c.orig 2012-12-01 13:57:54.000000000 -0600
+++ lib/imclient.c      2019-10-03 14:40:11.254566297 -0500
@@ -1695,7 +1695,7 @@
        return -1;
     }

-    imclient->tls_ctx = SSL_CTX_new(TLSv1_client_method());
+    imclient->tls_ctx = SSL_CTX_new(TLSv1_2_client_method());
     if (imclient->tls_ctx == NULL) {
        return -1;
     };


tls_cipher_list: kEECDH:+kEECDH+SHA:kEDH:+kEDH+SHA:+kEDH+CAMELLIA:kECDH:+kECDH+SHA:kRSA:+kRSA+SHA:+kRSA+CAMELLIA:!aNULL:!eNULL:!SSLv2:!RC4:!MD5:!DES:!EXP:!SEED:!IDEA:!3DES:!SSLv3
------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T21eaaa194ab9b730-M3297b819db9f8132779d0989
Delivery options: https://cyrus.topicbox.com/groups/info/subscription
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.