Package: src:kde4libs
Version: 4:4.14.26-2
Severity: important
Tags: patch, stretch

--- Please enter the report below this line. ---

kmail in stretch only supports TLSv1.0 which hinders it to connect to mail 
servers that only support TLSv1.2 or TLSv.1.1.

The attached patch is a backport of the upstream fix from here:
https://bugs.kde.org/show_bug.cgi?id=342567
https://git.reviewboard.kde.org/r/129031/

It is necessary for smtp connections.

I primary reported the patches here 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797844#33
but was told on irc to file separate bug reports.

I tested this patch for some weeks on my system without any issues.
Pleas let me know if you have any questions.

Thank you for maintaining KDE packages in Debian!

--- System information. ---
Architecture: 
Kernel:       Linux 4.9.0-6-amd64

Debian Release: 9.3
  500 stable-updates  deb.debian.org 
  500 stable          deb.debian.org 
  100 stretch-backports deb.debian.org 

--- Package information. ---
Package's Depends field is empty.

Package's Recommends field is empty.

Package's Suggests field is empty.



--- a/kio/kio/tcpslavebase.cpp
+++ b/kio/kio/tcpslavebase.cpp
@@ -499,7 +499,7 @@
 {
     if (d->usingSSL)
         return false;
-    return d->startTLSInternal(KTcpSocket::TlsV1) & ResultOk;
+    return d->startTLSInternal(KTcpSocket::SecureProtocols) & ResultOk;
 }
 
 TCPSlaveBase::SslResult TCPSlaveBase::TcpSlaveBasePrivate::startTLSInternal (KTcpSocket::SslVersion version,

Attachment: signature.asc
Description: This is a digitally signed message part.

  • Bug#891254: [src:kde4libs] Please enable TLSv1.2 for... Maximilian Engelhardt

Reply via email to