Re: Howto disable SSLv3 and only use TLS
Jimmy Dorff <[email protected]> Wed, 15 Oct 2014 15:32:05 -0400 (EDT)
| Newsgroups | gmane.mail.imap.uw.c-client |
|---|---|
| Message-ID | <[email protected]> |
On Wed, 15 Oct 2014, Dan Lukes wrote: > On 10/15/14 20:44, Jimmy Dorff: >> Is this possible to disable SSLv3 and only accept imaps using TLS? > > As far as I know, no. But I created custom source patch for > osdep/unix/ssl_unix.c > > Such patch allow me to write something like > > set ssl-protocols -ALL +TLSv1 > set ssl-cipher-list HIGH:!ADH:!EXPORT56:!SSLv2 > > into c-client.cf file. > > Patch is not ready for other OSes like NT, but it should not be so hard to > port it. > > You didn't specified your environment. I'm on CentOS Linux and specifically using the panda-imap now on github. Is the patch available for testing? Cheers, Jimmy _______________________________________________ Imap-uw mailing list [email protected] http://mailman13.u.washington.edu/mailman/listinfo/imap-uw