Re: Howto disable SSLv3 and only use TLS

Dan,

I'd love to see your patch, can you post it? Did your patch also allow 
DHE ciphers to be used?

thanks,
David

On 10/15/2014 12:15 PM, Dan Lukes wrote:
> On 10/15/14 20:44, Jimmy Dorff:
>> Is this possible to disable SSLv3 and only accept imaps using TLS?
>
> As far as I know, no. But I created custom source patch for
> osdep/unix/ssl_unix.c
>
> Such patch allow me to write something like
>
> set ssl-protocols -ALL +TLSv1
> set ssl-cipher-list HIGH:!ADH:!EXPORT56:!SSLv2
>
> into c-client.cf file.
>
> Patch is not ready for other OSes like NT, but it should not be so 
> hard to port it.
>
> You didn't specified your environment.
>
> Dan
>
> _______________________________________________
> Imap-uw mailing list
> [email protected]
> http://mailman13.u.washington.edu/mailman/listinfo/imap-uw
>