#873064 dovecot-imapd: Can't connect from older MacOSX and iOS devices to imap 993

Package:
dovecot
Source:
dovecot
Submitter:
Peter Chubb
Date:
2022-07-03 22:21:04 UTC
Severity:
normal
Tags:
#873064#5
Date:
2017-08-24 07:26:45 UTC
From:
To:
Dear Maintainer,

After upgrading dovecot, MacOSX El Capitan and IOS versions below 8 can
no longer connect.  The error in the log is:
 SSL_accept() failed: error:1417D18C:SSL routines:tls_process_client_hello:version too low, session=...

How can I reenable TLSv1 ?  The obvious
ssl_protocols = TLSv1, TLSv1.1, TLSv1.2, !SSLv2, !SSLv4
doesn't work for me.
#873064#10
Date:
2017-08-24 08:46:31 UTC
From:
To:
This is due to a bug introduced in OpenSSL 1.1.0f-4, which you presumably
updated at the same time. As I am not a Debian Developer I will leave it to
someone else to reassign this bug.

I would assume that downgrading openssl and libssl1.1 to version 1.1.0f-3
(available from snapshot.debian.org) should work...

Roger
#873064#15
Date:
2017-08-24 09:00:11 UTC
From:
To:
Thankyou!  Downgrading libssl1.1 to 1.1.0f-3 fixewd the problem.

Peter C
#873064#26
Date:
2017-08-24 09:20:19 UTC
From:
To:
Note however the older versions of libssl had security problems.  You
really ought to upgrade the clients.  (I do realize that's sometimes
easier said than done.)