Re: cyradm and TLS 1.2

2019-10-15 Thread John Wade
Thanks!  You have the more correct fix: From: https://www.openssl.org/docs/man1.1.0/man3/TLSv1_client_method.html "TLS_method(), TLS_server_method(), TLS_client_method() These are the general-purpose version-flexible SSL/TLS methods. The actual protocol version used will be negotiated to the hi

Re: cyradm and TLS 1.2

2019-10-15 Thread ellie timoney
Thanks for reporting back. For whatever its worth, the equivalent fix on 2.5+ uses "TLS_client_method()", not "TLSv1_2_client_method()". I'm not sure what difference it makes, but maybe it requires a newer OpenSSL than you have? Here's the commit to master, fyi: https://github.com/cyrusimap/cyr

Re: cyradm and TLS 1.2

2019-10-14 Thread John Widera
Turns out imclient (at least in the latest RHEL7 pkg) is hardcoded to use TLSv1. Since we're building binary RPMs from Source RPMs anyway we modified imclient.c, rebuilt the RPMs, reinstalled the cyrus-imapd-utils package: Here's the patch we used: --