Hi,
I found a typo in libs/tcpd/libcouriertls.c and SSLv3 was still
available with "TLS_PROTOCOL=TLS1" configuration.
This is patch for libs/tcpd/libcouriertls.c:
diff -c libs/tcpd/libcouriertls.c.old libs/tcpd/libcouriertls.c
*** libs/tcpd/libcouriertls.c.old 2014-10-21 10:58:43.000000000 +0900
--- libs/tcpd/libcouriertls.c 2014-10-21 11:03:24.000000000 +0900
***************
*** 530,536 ****
? SSLv3_method():
strcmp(protocol, "SSL23") == 0
? SSLv23_method():
! strcmp(protocol, "TLSv1") == 0
? TLSv1_method():
#ifdef HAVE_TLSV1_1_METHOD
strcmp(protocol, "TLSv1.1") == 0
--- 530,536 ----
? SSLv3_method():
strcmp(protocol, "SSL23") == 0
? SSLv23_method():
! strcmp(protocol, "TLS1") == 0
? TLSv1_method():
#ifdef HAVE_TLSV1_1_METHOD
strcmp(protocol, "TLSv1.1") == 0
Thanks.
------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://p.sf.net/sfu/Zoho
_______________________________________________
Courier-imap mailing list
Courier-imap@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap
