Re: IMAP over SSL error

[Pawel Salek <pawsa0 gmail com>]

On 09/03/2009 06:24:21 PM, Ildar Mulyukov wrote:
> 	Hi!
>
> I get balsa complaining:
> 	OpenSSL error in imap_setup_ssl():
> 	14071:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version  
> number:s3_pkt.c:284:
>
> 	End of print_errors
> while connecting with imapS with Lotus Domino 8.
>
> rpm -qR balsa | grep ssl
> libssl.so.7

It may be that lotus does not support the same encryption methods as  
balsa. Can you please try the following commands and report the result  
(success/failure)?

openssl s_client -connect imaphost:993 -ssl3 -crlf
openssl s_client -connect imaphost:993 -ssl2 -crlf
openssl s_client -connect imaphost:993 -tls1 -crlf

(if it connects without error, just type ". LOGOUT" and press enter).

Balsa currently allows only TLSv1. We used to allow SSLv3 but it did  
not work well with all servers (see  
libbalsa/imap/imap-tls.c:imap_create_ssl). We should not allow SSLv2  
since it has fundamental design problems.

Pawel