The relevant courier setting is: ##NAME: TLS_PROTOCOL:0 # # TLS_PROTOCOL sets the protocol version. The possible versions are: # # OpenSSL: # # SSL3 - SSLv3 # SSL23 - all protocols (including TLS 1.x protocols) # TLS1 - TLS1 # TLSv1.1 - TLS1.1 # TLSv1.2 - TLS1.2 # # Leave it unset to use any protocol except SSL 2.
I have it unset, so it should support TLS 1.1 and 1.2. As an experiment I have changed it to TLS 1.1 and 1.2 only, then restarted the server. That did not fix it. The logging levels have been increased but aren't showing a lot of extra information. I will dig deeper to see if more information is possible. On Monday, 8 February 2016 16:07:34 UTC, Richard wrote: > > Make certain that the "ssl protocols" that your imap server supports > include TLS v1.1 and 1.2. I'm not certain that android-6/k-9 are > happy with SSLv3 any longer. Most imap servers get that from the > underlying system-level SSL libraries, not built-in, but I don't use > courier so can't say for certain in your environment. [On my imap > server I have SSLv2 and v3 explicitly disabled.] > > I think that your logs should give hints, if you have the logging > level set high enough. > > > > Date: Monday, February 08, 2016 07:38:38 -0800 > > From: Steve Evans <[email protected] <javascript:>> > > > > These are devices that have been updated. The Nexus 7 tablet was > > updated in October and k9 mail hasn't worked since. The Moto X > > Play just updated this weekend and similarly stopped working. > > > > I have regenerated the SSL certificate and gone through K9's > > Incoming Server/Next options. K9 warned me about the unsigned > > certificate, with an Accept Key option that I selected. It still > > didn't work. > > > > > > On Monday, 8 February 2016 15:11:29 UTC, Richard wrote: > >> > >> > >> > >> > Date: Monday, February 08, 2016 06:58:18 -0800 > >> > From: Steve Evans <[email protected] <javascript:>> > >> > > >> > > >> > > >> > I cannot fetch mail from my courier imap ssl server from k9mail > >> > on Android 6. it worked on Android 5.1. I have made no > >> > changes to the settings, which are: > >> > > >> > > >> > Security: SSL/TLS > >> > Port: 993 > >> > Authentication: Normal password > >> > Auto-detect IMAP namespace > >> > > >> > > >> > The server has a self signed SSL certificate which has not > >> > expired. > >> > > >> > This happens on both my Nexus 7 tablet and my Moto X play > >> > phone. > >> > >> Did this issue start when the devices were updated from > >> Android-5.x to 6, or are these new devices (that came with 6)? > >> > >> Self-signed certs are a bit tricky as they require explicit > >> acceptance (by any mail client) at setup, whether they are > >> unexpired or not. > >> > >> If you haven't already, go through the "fetching mail/incoming > >> mail server" setup and select the "next". That should test the > >> connection and generally results in a cert acceptance prompt. If > >> there's some other issue it should be reported there too. > >> > >> If you've done that, then look at the imap server logs and see > >> what it's saying about the incoming connection. You may need to > >> turn up the logging level some to be able to see useful output. > >> > > ------------ End Original Message ------------ > > > -- -- You received this message because you are subscribed to the K-9 Mail Users List. To post to this group, send email to [email protected] To unsubscribe, email [email protected] To report an issue with K-9 Mail, visit http://code.google.com/p/k9mail/issues/list For more options, visit this group at http://groups.google.com/group/k-9-mail --- You received this message because you are subscribed to the Google Groups "K-9 Mail" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
