Lindsay Haisley writes:
On Fri, 2009-02-06 at 18:02 -0500, Sam Varshavchik wrote:Lindsay Haisley writes:> On Fri, 2009-02-06 at 12:27 -0800, Gordon Messmer wrote:>> If you are using Courier, built with OpenSSL support, and the remote >> server doesn't use a permissive protocol handshake, nothing you can do >> will make this work. I recommend using GnuTLS instead of OpenSSL. > > How is this done? I don't see any configure option in the main> configure script for anything related to SSL/TLS library choice, nor > does the Gentoo ebuild offer one as a USE variable setting for the > Courier package. Does one simply set the LIBS env var at build time to > point to libgnutls-openssl.so?Before you go crazy over this, just try removing all explicit TCP_PROTOCOL and TLS_CIPHERLIST settings. In 0.59, they now have better defaults that should be more compatible, out of the box. Explicit TLS_PROTOCOL settings, after 0.59, are often counterproductive.Should this include the setting(s) for TLS_STARTTLS_PROTOCOL as well? (I assume you mean "TLS_PROTOCOL" and not "TCP_PROTOCOL" - there ain't no such setting :-)
Keep TLS_STARTTLS_PROTOCOL set to TLS1.
pgpQVS3Qsiy71.pgp
Description: PGP signature
------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
