At 3:08 PM -0500 9/11/02, Scott Johnson wrote:

>  I'm trying to stay away from beta-level software at my installation.

Understandable, but in this case 4.0.5bx has very few changes (feel 
free to run a diff and check them out).  The main change is the 
ability to set the OpenSSL options to enable work-arounds.

>  The tls-options setting that Brian mentioned below definitely 
> doesn't work with 4.0.4:
>
>  Unrecognized option; scanning "tls-options" at line 9 of config 
> file /etc/popper.conf

Right, that's the main change in 4.0.5: the ability to set these options.

>  So does qpopper just not work with the more recent versions of OpenSSL?

Qpopper does, but there is an interoperability problem with Eudora's 
TLS/SSL library and a new security counter-measure introduced in 
recent OpenSSL versions.  The new Qpopper tls-options setting allows 
you to turn this off, and have things work again.  Once a version of 
Eudora is available that works with OpenSSL without setting the 
work-around, you can remove it from the config file.


Reply via email to