Mark Edwards wrote:
imapd can do SSL on, say port 993, or it can do TLS with STARTTLS on port 143, right? But TLS without STARTTLS is not supported?

TLS ... transport layer security is somehow an improved and standardized SSL ver. 3

Here an example with uw-imapd as server:

# openssl s_client -host MAILSERVER -port 993 -tls1 -no_ssl3 -no_ssl2
CONNECTED(00000003)
[...certificate stuff removed...]
---
No client certificate CA names sent
---
SSL handshake has read 995 bytes and written 278 bytes
---
New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA
Server public key is 1024 bit
SSL-Session:
    Protocol  : TLSv1
    Cipher    : DES-CBC3-SHA
    Session-ID: B6B5F2BA27ED3BF40161C7344AA9C98C296CC4D515FD110377E79C1225512D0C
    Session-ID-ctx:
    Master-Key: 
CAD03D32A7067DA57CB668CADCDB24AD86CCB3C705B5B3BB0E984970EB7B8CF3193E8A49B1ED10F72672CA9D408F40EC
    Key-Arg   : None
    Start Time: 1046350839
    Timeout   : 7200 (sec)
    Verify return code: 18 (self signed certificate)
---
* OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS AUTH=PLAIN AUTH=LOGIN] ........

PS: PLEASE do not reply to a mail from this list to start a new thread.
Next time compose a new mail. TIA.

--
MfG / Regards
Friedrich Lobenstock



Reply via email to