Package: isync
Version: 1.2.1-2
Severity: important
Tags: upstream

Ohai,

isync/mbsync defaults to use TLSv1, which was recently disabled in Debian [1].
This results in funny errors when trying to use mbsync now:
 Socket error: secure connect to mail.die-welt.net (81.7.13.250:143): 
error:141640BF:SSL routines:tls_construct_client_hello:no protocols available

Please don't hardcode any TLS defaults, let OpenSSL use whatever it knows is 
best.

Tempted to add a "security" tag.

Regards
Evgeni

[1] https://lists.debian.org/debian-devel-announce/2017/08/msg00004.html

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.11.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages isync depends on:
ii  libc6       2.24-14
ii  libdb5.3    5.3.28-13
ii  libsasl2-2  2.1.27~101-g0780600+dfsg-3
ii  libssl1.1   1.1.0f-4
ii  zlib1g      1:1.2.8.dfsg-5

isync recommends no packages.

Versions of packages isync suggests:
ii  mutt  1.8.3+neomutt20170609-2+b1

-- no debconf information

Reply via email to