Here's a patch.
Before, when connecting to GMail IMAP with PHP:
root@39f3acd3838c:/app# php -r
'imap_open("{imap.gmail.com:993/imap/ssl}INBOX", "user", "pass") or
die(imap_last_error());'
Warning: imap_open(): Couldn't open stream
{imap.googlemail.com:993/imap/ssl}INBOX in /app/imap.php on line 6
Certificate failure for imap.googlemail.com: self signed certificate: /OU=No
SNI provided; please fix your client./CN=invalid2.invalid
After the patch (the auth error is correct for those credentials
obviously):
root@00b5d649f707:/app# php -r
'imap_open("{imap.gmail.com:993/imap/ssl}INBOX", "user", "pass") or
die(imap_last_error());'
Warning: imap_open(): Couldn't open stream
{imap.googlemail.com:993/imap/ssl}INBOX in /app/imap.php on line 5
Can not authenticate to IMAP server: [AUTHENTICATIONFAILED] Invalid credentials
(Failure)
There is a similar patch at https://bugs.debian.org/cgi-
bin/bugreport.cgi?bug=916041, but that uses an OpenSSL version check
instead of the IMO better #ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
** Bug watch added: Debian Bug tracker #916041
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916041
** Patch added: "uw-imap-sni.patch"
https://bugs.launchpad.net/ubuntu/+source/uw-imap/+bug/1834340/+attachment/5280829/+files/uw-imap-sni.patch
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1834340
Title:
Possible regression on libssl upgrade when using TLSv1.3
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php-imap/+bug/1834340/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
