Re: IMAP over SSL error

On 09/03/2009 06:24:21 PM, Ildar Mulyukov wrote:

I get balsa complaining:
	OpenSSL error in imap_setup_ssl():
14071:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:284:

	End of print_errors
while connecting with imapS with Lotus Domino 8.

rpm -qR balsa | grep ssl

It may be that lotus does not support the same encryption methods as balsa. Can you please try the following commands and report the result (success/failure)?

openssl s_client -connect imaphost:993 -ssl3 -crlf
openssl s_client -connect imaphost:993 -ssl2 -crlf
openssl s_client -connect imaphost:993 -tls1 -crlf

(if it connects without error, just type ". LOGOUT" and press enter).

Balsa currently allows only TLSv1. We used to allow SSLv3 but it did not work well with all servers (see libbalsa/imap/imap-tls.c:imap_create_ssl). We should not allow SSLv2 since it has fundamental design problems.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]