Package: src:libkf5ksieve
Version: 4:16.04.3-2
Severity: important
Tags: patch, stretch

--- Please enter the report below this line. ---

kmail in stretch only supports TLSv1.0 which hinders it to connect to mail 
servers that only support TLSv1.2 or TLSv.1.1.

The attached patch is a backport of the upstream fix from here:
https://bugs.kde.org/show_bug.cgi?id=342567
https://git.reviewboard.kde.org/r/129029/

It is necessary for sieve connections.

I primary reported the patches here 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797844#33
but was told on irc to file separate bug reports.

I tested this patch for some weeks on my system without any issues.
Pleas let me know if you have any questions.

Thank you for maintaining KDE packages in Debian!

--- System information. ---
Architecture: 
Kernel:       Linux 4.9.0-6-amd64

Debian Release: 9.3
  500 stable-updates  deb.debian.org 
  500 stable          deb.debian.org 
  100 stretch-backports deb.debian.org 

--- Package information. ---
Package's Depends field is empty.

Package's Recommends field is empty.

Package's Suggests field is empty.



--- a/src/kmanagesieve/sessionthread.cpp
+++ b/src/kmanagesieve/sessionthread.cpp
@@ -453,7 +453,7 @@
         m_sslCheck->setInterval(60 * 1000);
         connect(m_sslCheck, &QTimer::timeout, this, &SessionThread::slotSslTimeout);
     }
-    m_socket->setAdvertisedSslVersion(KTcpSocket::TlsV1);
+    m_socket->setAdvertisedSslVersion(KTcpSocket::SecureProtocols);
     m_socket->ignoreSslErrors();
     connect(m_socket, &KTcpSocket::encrypted, this, &SessionThread::slotEncryptedDone);
     m_sslCheck->start();

Attachment: signature.asc
Description: This is a digitally signed message part.

  • Bug#891253: [src:libkf5ksieve] Please enable TLSv1.2... Maximilian Engelhardt

Reply via email to