[patch] TLS Handshake failures can crash imap-login

Teemu Huovila teemu.huovila at dovecot.fi
Mon Apr 27 06:52:22 UTC 2015


On 04/26/2015 10:51 PM, Hanno Böck wrote:
> On Sun, 26 Apr 2015 21:51:25 +0300
> Teemu Huovila <teemu.huovila at dovecot.fi> wrote:
> 
>> Seems the issue might require a version of libopenssl, that does not
>> have support for sslv3 compiled in. I have been made aware, that we
>> have a fix for Dovecot in the works.
> 
> No that's not true. I have explicitely tried that.
> You just need to *disable* SSLv3, but that can be done within the
> config file.
Fair enough. So it needs to be a libopenssl, with sslv3 removed somehow. Conversely, a workaround for this issue would be to
enable sslv3, on the library level.

Thank you again for your report and patch,
Teemu Huovila


More information about the dovecot mailing list