Re: [Evolution] TLSv1+ support

[Pete Biggs <pete biggs org uk>]

> I am using Evolution v 3.10.4, as distributed with Ubuntu 14.04
> After the recent SSLv3 vulnerabilities I disabled SSLv3 support on my
> dovecot server, leaving TLS1, 1.1 and 1.2
> This broke connectivity and evolution now complains that
> "no common encryption algorithms exist".
> ssldump on the server shows that a SSLv3 hello is issued by Evolution.
> Since that is not supported, the connection dies without an attempt to
> use any of the newer protocols.
>
> Is there a setting for it that I am missing? Can proper TLS support be
> manually compiled in? I would really hate to have to switch mail
> clients.

It's to do with Evolution not handling SSL connections properly.  See

https://mail.gnome.org/archives/evolution-list/2014-October/msg00107.html

The solution for 3.10.x is to use STARTTLS, which gets it right.  It has
been fixed in later versions.

P.