On Fri, Aug 11, 2017 at 08:20:38AM +0200, Evgeni Golov wrote: > Package: isync > Version: 1.2.1-2 > Severity: important > Tags: upstream > > Ohai, > > isync/mbsync defaults to use TLSv1, which was recently disabled in Debian [1]. > This results in funny errors when trying to use mbsync now: > Socket error: secure connect to mail.die-welt.net (81.7.13.250:143): > error:141640BF:SSL routines:tls_construct_client_hello:no protocols available > > Please don't hardcode any TLS defaults, let OpenSSL use whatever it knows is > best. > > Tempted to add a "security" tag.
I wonder whether this should be a "serious" bug: it makes the package unusable whenever a mailbox has an SSL handshake. Julian
