#998751 perdition: Perdition supports TLS1.3 but has no tlsv1.3

Package:
perdition
Source:
perdition
Description:
POP3 and IMAP4 Proxy server
Submitter:
Lupe Christoph
Date:
2021-11-07 16:12:04 UTC
Severity:
normal
#998751#5
Date:
2021-11-07 15:59:22 UTC
From:
To:
Dear Maintainer,

Please add support for tlsv1.3 in --ssl_(listen|outgoing)_(min|max)_proto_version.

   * What led up to the situation?
Trying to upgrade perdition and all clients to TLS 1.3.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
We are using this ARGS string:
IMAP4_FLAGS="-u perdition -g perdition --username_from_database --tcp_keepalive --timeout 300 --outgoing_port imap --listen_port XXXX --ssl_mode tls_listen_force --ssl_dh_params_file /etc/perdition/dh2048.pem --ssl_listen_min_proto_version tlsv1.3"
This works with --ssl_listen_min_proto_version tlsv1.2 but not with tlsv1.3.

   * What was the outcome of this action?
The IMAP4 instance of perdition fails to start.

   * What outcome did you expect instead?
That instance should run, refusing SSL and TLS up to 1.2. And plaintext.