Bug#871987: openssl breaks dovecot

2017-08-25 Thread James Cloos
> "CC" == Carlos Carvalho writes: CC> Reverting the upgrade is messy (I run unstable). I tried to compile the CC> packages removing the disable-tls1 disable-tls1_1 in CONFARGS but the build CC> failed in the tests with You can grab the deb files for version 1.1.0f-3

Bug#871987: openssl breaks dovecot

2017-08-23 Thread Carlos Carvalho
After this upgrade our mail server no longer accept emails from the American Physical Society, which publishes some of the more important physics journals... This has been a significant problem for my colleagues in the past 2 weeks, both for submitting articles for publication and for refereeing

Bug#871987: openssl breaks dovecot

2017-08-16 Thread Sebastian Andrzej Siewior
On 2017-08-16 07:46:14 [-0700], James Bottomley wrote: > When you run a system for others, you don't get to dictate tools. I do :) >  However, from the complaints it seems to be android 2.3.7 and any > embedded system still using openssl 0.9.8, which must be using TLS 1.0 so basically everything

Bug#871987: openssl breaks dovecot

2017-08-16 Thread James Bottomley
On Wed, 2017-08-16 at 08:34 +0200, Sebastian Andrzej Siewior wrote: > On 2017-08-14 10:46:04 [-0700], James Bottomley wrote: > > > > Just a me too on this: on upgrade, both dovecot and a stunnel based > > web application got broken for an older android client. > >  Downgrading to 1.1.0f-3 fixes

Bug#871987: openssl breaks dovecot

2017-08-16 Thread Gedalya
My perspective on this, from the client side, doing my routine sysadmin work: When disabling TLSv1 on a server, I'm no longer able to verify that using openssl s_client -tls1, I get "s_client: Option unknown option -tls1". Also I am unable to connect to some old servers supporting only TLSv1. I

Bug#871987: openssl breaks dovecot

2017-08-16 Thread Sebastian Andrzej Siewior
On 2017-08-14 10:46:04 [-0700], James Bottomley wrote: > Just a me too on this: on upgrade, both dovecot and a stunnel based web > application got broken for an older android client.  Downgrading > to 1.1.0f-3 fixes the problem for both dovecot and stunnel4 So what are we talking about? Android 4

Bug#871987: openssl breaks dovecot

2017-08-14 Thread James Bottomley
Just a me too on this: on upgrade, both dovecot and a stunnel based web application got broken for an older android client.  Downgrading to 1.1.0f-3 fixes the problem for both dovecot and stunnel4 James

Bug#871987: openssl breaks dovecot

2017-08-13 Thread Sebastian Andrzej Siewior
On 2017-08-13 11:13:25 [+0200], Harald Dunkel wrote: > Since the upgrade to 1.1.0f-4 I cannot read EMails via imap from > my old ipad anymore (unless I disable encryption). Moving back to > 1.1.0f-3 fixes the problem. is blue mail working? Sebastian

Bug#871987: openssl breaks dovecot

2017-08-13 Thread Harald Dunkel
Package: libssl1.1 Version: 1.1.0f-4 Since the upgrade to 1.1.0f-4 I cannot read EMails via imap from my old ipad anymore (unless I disable encryption). Moving back to 1.1.0f-3 fixes the problem. imap server is dovecot 1:2.2.31-1. Of course I know that tls 1.0 and 1.1 have been dropped on