Re: Howto disable SSLv3 and only use TLS

Jimmy Dorff <[email protected]> Wed, 15 Oct 2014 15:32:05 -0400 (EDT)
Newsgroups gmane.mail.imap.uw.c-client
Message-ID <[email protected]>
On Wed, 15 Oct 2014, Dan Lukes wrote:
> On 10/15/14 20:44, Jimmy Dorff:
>>  Is this possible to disable SSLv3 and only accept imaps using TLS?
>
> As far as I know, no. But I created custom source patch for
> osdep/unix/ssl_unix.c
>
> Such patch allow me to write something like
>
> set ssl-protocols -ALL +TLSv1
> set ssl-cipher-list HIGH:!ADH:!EXPORT56:!SSLv2
>
> into c-client.cf file.
>
> Patch is not ready for other OSes like NT, but it should not be so hard to 
> port it.
>
> You didn't specified your environment.

I'm on CentOS Linux and specifically using the panda-imap now on github. 
Is the patch available for testing?

Cheers,
Jimmy

_______________________________________________
Imap-uw mailing list
[email protected]
http://mailman13.u.washington.edu/mailman/listinfo/imap-uw