disable SSLv3

2014-10-17 Thread Antonio Denizor
Hi, I'm trying to protect myself from POODLE SSLv3 Vulnerability, I have cyrus-imapd-2.3.7-12 and CentOS release 5.9, I need a help, how to disable SSLv3 in my Cyrus IMAP server? Bestregards, Antonio Denizor Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andr

Re: messages removed before expire

2014-10-17 Thread Bron Gondwana
On Fri, Oct 17, 2014, at 11:19 AM, Stephen Ingram wrote: On Fri, Oct 17, 2014 at 7:50 AM, Bron Gondwana <[1]br...@fastmail.fm> wrote: iOS is known for deleting messages from the Trash folder on its own behalf. On Fri, Oct 17, 2014, at 10:36 AM, Joseph Brennan wrote: > > > > > Oct 1 09:45:41 im

Re: messages removed before expire

2014-10-17 Thread Stephen Ingram
On Fri, Oct 17, 2014 at 7:50 AM, Bron Gondwana wrote: > iOS is known for deleting messages from the Trash folder on its own behalf. > > On Fri, Oct 17, 2014, at 10:36 AM, Joseph Brennan wrote: > > > > > > > > > Oct 1 09:45:41 imap1 imap[7357]: Expunged 19 messages from > user.ken.Trash > > > > T

Re: messages removed before expire

2014-10-17 Thread Bron Gondwana
iOS is known for deleting messages from the Trash folder on its own behalf. On Fri, Oct 17, 2014, at 10:36 AM, Joseph Brennan wrote: > > > > > Oct 1 09:45:41 imap1 imap[7357]: Expunged 19 messages from user.ken.Trash > > The above shows *imap* doing an expunge. The imap client did this. Given

Re: messages removed before expire

2014-10-17 Thread Joseph Brennan
> Oct 1 09:45:41 imap1 imap[7357]: Expunged 19 messages from user.ken.Trash The above shows *imap* doing an expunge. The imap client did this. Given delayed expunge the messages would still be there on the filesystem after this. The real expunge done by the expire job does not say "imap":

Re: messages removed before expire

2014-10-17 Thread Bron Gondwana
On Fri, Oct 17, 2014, at 01:48 AM, Stephen Ingram wrote: On Thu, Oct 2, 2014 at 8:48 AM, Stephen Ingram <[1]sbing...@gmail.com> wrote: On Tue, Sep 16, 2014 at 11:15 PM, Bron Gondwana <[2]br...@fastmail.fm> wrote: On Wed, Sep 17, 2014, at 08:24 AM, Stephen Ingram wrote: On Tue, Sep 16, 2014 at 3

Re: Upgrading from 2.2 to 2.4 (slow cyr_expire)

2014-10-17 Thread Jay Sekora
On 10/16/2014 05:43 PM, Andrew Morgan wrote: > You could comment cyr_expire out of cyrus.conf before you upgrade. > After a few days, you could uncomment cyr_expire and send a HUP signal > to the Cyrus master process to have it re-read cyrus.conf. > > Remember, the mailbox will be upgraded anytim

Re: Patch for adding tls_honor_cipher_order

2014-10-17 Thread Kristian Kræmmer Nielsen
Hi Wolfgang, Not to start a flame war - but I was responding to Jeroen stating they were in cyrus-imapd-2.4 "Something similar is already in cyrus-imapd-2.4". I know that the bugs were there, my patches even refer to them :) The more important part of my previous mail are that there are issue

Re: Patch for adding tls_honor_cipher_order

2014-10-17 Thread Wolfgang Breyha
Kristian Kræmmer Nielsen wrote on 17/10/14 14:48: > "already" - I see you just added it ;-) No, they (and more) were there for month as https://bugzilla.cyrusimap.org/show_bug.cgi?id=3822 https://bugzilla.cyrusimap.org/show_bug.cgi?id=3823 https://bugzilla.cyrusimap.org/show_bug.cgi?id=3830 https:

Re: Patch for adding tls_honor_cipher_order

2014-10-17 Thread Kristian Kræmmer Nielsen
Hi, "already" - I see you just added it ;-) But really great Jeroen for implementing these - thanks. Just a few comments - I see you also added tls_compression - maybe you should consider also actually implementing it? ;-) Also I would recommend logging a failure if a wrong tls_eccurve is s

Re: Patch for adding tls_honor_cipher_order

2014-10-17 Thread Jeroen van Meeuwen (Kolab Systems)
On 2014-10-16 19:32, Kristian Kræmmer Nielsen wrote: > Hi, > > Patch attached. > Something similar is already in cyrus-imapd-2.4: http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&id=4b26d2d7244eeaa481871c337e57cd393fd76dfe For master / 2.5, I have a push pending of a similar