Package: icedove
Version: 31.8.0-1~deb8u1
Severity: important
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
Upgrade of cryptography standard of my hoster's mail server from SSL 3.0
to TLS 1.2. Before
implementation of TLS 1.2 I used the workaround of setting the
security.tls.version.min
to 0 in the registry. Strangely, the config had to be altered every time
on startup.
* What exactly did you do (or not do) that was effective (or
ineffective)?
Proposed workaround of Bugzilla Bug 1184488 was not effective:
security.ssl3.dhe_dss_aes_128_sha;false
security.ssl3.dhe_rsa_aes_128_sha;false
security.ssl3.dhe_rsa_aes_256_sha;false
security.ssl3.dhe_rsa_des_ede3_sha;false
* What was the outcome of this action?
Issue still exists, error console still reports two errors when trying to
connect:
1) 'ssl_error_bad_cert_domain' - certificate appears to be valid only for
my hoster.
mail.example.at:143 uses an invalid security certificate. Certificate only
valid for *.hoststar.at, hoststar.at
2) 'ssl_error_weak_server_ephemeral_dh_key' - according to ssllabs.com,
the mailserver
provides 1024 bit DH keys. Two tests were performed in the commandline,
both returning errors:
$ openssl s_client -connect mail.jazzco.at:143 -cipher "EDH" | grep
"Server Temp Key"
$ openssl s_client -connect mail.jazzco.at:143 -cipher "ECDHE"
* Please anonymize relevant parts of this bugreport. Is this a proper bug or
just a safety issue
concerning my hoster?
Cheers!
*** End of the template - remove these template lines ***
-- System Information:
Debian Release: 8.1
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_AT.utf8, LC_CTYPE=de_AT.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages icedove depends on:
ii debianutils 4.4+b1
ii fontconfig 2.11.0-6.3
ii libasound2 1.0.28-1
ii libatk1.0-0 2.14.0-1
ii libc6 2.19-18
ii libcairo2 1.14.0-2.1
ii libdbus-1-3 1.8.18-0+deb8u1
ii libdbus-glib-1-2 0.102-1
ii libevent-2.0-5 2.0.21-stable-2
ii libffi6 3.1-2+b2
ii libfontconfig1 2.11.0-6.3
ii libfreetype6 2.5.2-3
ii libgcc1 1:4.9.2-10
ii libgdk-pixbuf2.0-0 2.31.1-2+b1
ii libglib2.0-0 2.42.1-1
ii libgtk2.0-0 2.24.25-3
ii libhunspell-1.3-0 1.3.3-3
ii libnspr4 2:4.10.7-1
ii libpango-1.0-0 1.36.8-3
ii libpangocairo-1.0-0 1.36.8-3
ii libpangoft2-1.0-0 1.36.8-3
ii libpixman-1-0 0.32.6-3
ii libsqlite3-0 3.8.7.1-1+deb8u1
ii libstartup-notification0 0.12-4
ii libstdc++6 4.9.2-10
ii libvpx1 1.3.0-3
ii libx11-6 2:1.6.2-3
ii libxext6 2:1.3.3-1
ii libxrender1 1:0.9.8-1+b1
ii libxt6 1:1.1.4-1+b1
ii psmisc 22.21-2
ii zlib1g 1:1.2.8.dfsg-2+b1
Versions of packages icedove recommends:
ii hunspell-de-at [hunspell-dictionary] 20131206-5
ii hunspell-de-ch [hunspell-dictionary] 20131206-5
ii hunspell-de-de [hunspell-dictionary] 20131206-5
ii hunspell-en-us [hunspell-dictionary] 20070829-6
Versions of packages icedove suggests:
ii fonts-lyx 2.1.2-2
ii libgssapi-krb5-2 1.12.1+dfsg-19
-- no debconf information
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
