Re: [courier-users] TLS errors after 0.56.0 upgrade

> >Alexander Gretha wrote:
>> >>with TLS/SSL_PROTOCOL set to SSL2 the clients having the errors
>> before can connect ok, but all the others (using firefox) cannot
>> connect any more because firefox complains that the mail server uses
>> an older, insecure version >>of ssl... the 0.56.0 upgrade definitely
>> is not a peace of cake ...
>
> >Much noise was made when Mozilla announced that they were removing
> support for SSLv2, a couple of years ago. As I understand it, the
> RFCs have encouraged the deprecation of SSLv2 for more than a decade.
> Version 2, the >original SSL spec, has some fairly serious security
> problems (such as man in the middle attacks) that are prompting more
> people to remove support for it, or to disable it by default.
> >
> >I'm curious, what programs are you using that don't support SSLv3 or
> TLS? It'll save me some work if I can find out if anyone that I
> support is using such software, and update it before I update Courier. :)
the setup is as follows: i am having various customers who are using
email as their primary means of communication and i have no influence on
which email client they use. normally i recommend thunderbird, but what
they use is finally up to them. some still use outlook 2003 and those
are having the problem accessing the server in pop3-ssl and imap-ssl
mode. it looks like outlook 2003 says it implements version 3 but does
not do so in a complete or clean enough manner. also some people using
older versions of thunderbird (sorry don't know the exact version) have
been complaining about intermittent connection reset...
apart from that, some smtp servers trying to send emails to the courier
server seem to advertise sslv3 but do not implement it correctly and
therefore cannot send emails.
as i have seen this morning, mr. sam has implemented a workaround for
the situation in the new beta, which i am going to try right away.
thanks very much for that...

regards,
alex


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users