On 24/08/2017 08:26, Peter Chubb wrote:
> After upgrading dovecot, MacOSX El Capitan and IOS versions below 8 can 
> no longer connect.  The error in the log is:
>  SSL_accept() failed: error:1417D18C:SSL 
> routines:tls_process_client_hello:version too low, session=...

This is due to a bug introduced in OpenSSL 1.1.0f-4, which you presumably
updated at the same time. As I am not a Debian Developer I will leave it to
someone else to reassign this bug.

> How can I reenable TLSv1 ?  The obvious
> ssl_protocols = TLSv1, TLSv1.1, TLSv1.2, !SSLv2, !SSLv4
> doesn't work for me.

I would assume that downgrading openssl and libssl1.1 to version 1.1.0f-3
(available from snapshot.debian.org) should work...

Roger

Reply via email to