#931737 kdepim-runtime: Imap session login cancelled

Package:
kdepim-runtime
Source:
kdepim-runtime
Description:
runtime components for Akonadi KDE
Submitter:
Diego Russo
Date:
2019-10-22 21:51:03 UTC
Severity:
normal
#931737#5
Date:
2019-07-09 19:45:13 UTC
From:
To:
Dear Maintainer,

With Debian Buster akonadi does not work anymore with aruba imap server, goes
in a loop "idle/connection established" without downloading anything.
In .xsession-errors file there are infinite occurrences of :

org.kde.pim.kimap: Connection to server lost 9
org.kde.pim.imapresource: Session login cancelled

#931737#10
Date:
2019-07-10 10:30:25 UTC
From:
To:
It works only without encryption, if I set SSL/TLS port 993 plain  enter in
loop and if I delete account via Kmail a window asking for the imap password
is shown for a fraction of a second, when I have created the account I entered
the correct password and allowed its saving in the wallet.

#931737#15
Date:
2019-10-16 01:54:45 UTC
From:
To:
My guess is that it is caused by the default configuration of OpenSSL 1.1,
which requires TLS 1.2 iirc. If that aruba imap server is using old software
that doesn't support that version, then it won't be able to connect.

I ran into a seemingly similar situation when OpenSSL 1.1 entered Sid, but I
can't remember if/where I wrote things down wrt this and/or reported it.
But you can change the config of OpenSSL to allow lower TLS versions to work.
Better would be to urge that mail provider to upgrade their mail software as
TLS < 1.2 really isn't secure.

Hopefully this gives you enough hints to search for the actual solution.

#931737#20
Date:
2019-10-22 21:28:19 UTC
From:
To:
Changing back the defaults in /etc/ssl/openssl.cnf to previous system wide
defaults can be done using:
   MinProtocol = None
   CipherString = DEFAULT
It's recommended that you contact the remote site in case the defaults cause
problems.