Re: UW IMAP C-Client library and TLS 1.2 STARTTLS support issues.

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--------------------_Boundary_84744371.9886424
Content-Type: text/plain; format=flowed; charset=ISO-8859-15
Content-Transfer-Encoding: QUOTED-PRINTABLE

On Thu, 27 Jun 2019, Erik Kangas, Ph.D. wrote:

> I have noticed that the c-client library itself, however, seems stuck on=
=20
> TLS 1.0 and non-DH ciphers=A0 (I noticed that as we forced some servers t=
o=20
> use ONLY the DH and TLS 1.2+ and found that things using the compiled=20
> c-client libraries could no longer connect to them.... where as anything=
=20
> else can (openssl with startls, etc.).=A0

Dear Erik,

   I develop for Alpine, not c-client, but whenever I upgrade my version of=
=20
openssl and recompile Alpine I need to modify c-client so it will work=20
again. My code makes Alpine connect even with TLS 1.3, but in order to do=
=20
that you will need to get the ful code of Alpine from

http://repo.or.cz/alpine.git

and build Alpine using the "configure" script. I do not support building=20
the c-client library as a stand-alone library, so the "make" command in=20
the imap/ directory will not work, which means that you will have to run=20
the configure script, and if you only want the c-client side, stop the=20
compilation after all the servers have been built. Support is intended for=
=20
OpenSSL and LibreSSL, ut not for BoringSSL.

One of the additions in c-client is the ability for applications to speciy=
=20
the range of encryption protocols that the user wants to allow/disallow.=20
The default is t use the ones the library allows, but you can restrict it=
=20
to say, TLS 1.1 and TLS 1.2 only, if you would like and disable, say,=20
SSLv3.

I hope this helps you.

--=20
Eduardo
--------------------_Boundary_84744371.9886424
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Imap-uw mailing list
[email protected]
http://mailman13.u.washington.edu/mailman/listinfo/imap-uw

--------------------_Boundary_84744371.9886424--