Source: libesmtp
Version: 1.0.6-1
Severity: normal

Hi

libesmtp currently only supports TLSv1:

smtp-tls.c:
199   /* The decision not to support SSL v2 and v3 but instead to use only
200      TLSv1 is deliberate.  This is in line with the intentions of RFC       
                                                                                
                                                                              
201      3207.  Servers typically support SSL as well as TLS because some
202      versions of Netscape do not support TLS.  I am assuming that all
203      currently deployed servers correctly support TLS.  */
204   ctx = SSL_CTX_new (TLSv1_client_method ());

Could you please make LibESMTP as well support TLSv1.1 and TLSv1.2.

Regards,
Salvatore

Reply via email to