Some people were reporting that an IMAP server wasn’t working on their Mac. It was working from linux machines, and from Thunderbird on all OSes. From Macs I was getting this testing from the command line:<\/p>\n
$ openssl s_client -connect <my-imap-server>:993\nCONNECTED(00000003)\n39458:error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version:\/BuildRoot\/Library\/Caches\/com.apple.xbs\/Sources\/OpenSSL098\/OpenSSL098-64.50.6\/src\/ssl\/s23_clnt.c:593:\n<\/code><\/pre>\nThis led me to a recent libssl<\/code> package upgrade on my server (to version 1.1.0f-4). Checking the changelogs I found this:<\/p>\n * Disable TLS 1.0 and 1.1, leaving 1.2 as the only supported SSL\/TLS\n version. This will likely break things, but the hope is that by\n the release of Buster everything will speak at least TLS 1.2. This will be\n reconsidered before the Buster release.\n<\/code><\/pre>\nAh-ha! To quickly get back up and running I grabbed the old version from http:\/\/ftp.us.debian.org\/debian\/pool\/main\/o\/openssl\/libssl1.1_1.1.0f-3_amd64.deb and installed it (and then held the package so it wouldn’t auto-upgrade).<\/p>\n
I do hope Debian reconsiders this change, at least in the short term, since I can’t easily force OS upgrades to everyone that uses this server. Ideally Apple would update their old OSes to support TLS 1.2, but I’m not holding my breath.<\/p>\n","protected":false},"excerpt":{"rendered":"
Some people were reporting that an IMAP server wasn’t working on their Mac. It was working from linux machines, and from Thunderbird on all OSes. From Macs I was getting this testing from the command line: $ openssl s_client -connect <my-imap-server>:993 CONNECTED(00000003) 39458:error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version:\/BuildRoot\/Library\/Caches\/com.apple.xbs\/Sources\/OpenSSL098\/OpenSSL098-64.50.6\/src\/ssl\/s23_clnt.c:593: This led me to a recent libssl package … Continue reading Debian OpenSSL 1.1.0f-4 and macOS 10.11 (El Capitan)<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-569","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/porkrind.org\/missives\/wp-json\/wp\/v2\/posts\/569","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/porkrind.org\/missives\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/porkrind.org\/missives\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/porkrind.org\/missives\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/porkrind.org\/missives\/wp-json\/wp\/v2\/comments?post=569"}],"version-history":[{"count":8,"href":"https:\/\/porkrind.org\/missives\/wp-json\/wp\/v2\/posts\/569\/revisions"}],"predecessor-version":[{"id":578,"href":"https:\/\/porkrind.org\/missives\/wp-json\/wp\/v2\/posts\/569\/revisions\/578"}],"wp:attachment":[{"href":"https:\/\/porkrind.org\/missives\/wp-json\/wp\/v2\/media?parent=569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/porkrind.org\/missives\/wp-json\/wp\/v2\/categories?post=569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/porkrind.org\/missives\/wp-json\/wp\/v2\/tags?post=569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}