<feed xmlns='http://www.w3.org/2005/Atom'>
<title>interimap/tests/tls-protocols/t, branch debian/buster-backports</title>
<subtitle>Fast bidirectional synchronization for QRESYNC-capable IMAP servers</subtitle>
<id>http://git.guilhem.org/interimap/atom?h=debian%2Fbuster-backports</id>
<link rel='self' href='http://git.guilhem.org/interimap/atom?h=debian%2Fbuster-backports'/>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/'/>
<updated>2020-12-17T12:47:09Z</updated>
<entry>
<title>test suite: use stock OpenSSL config except for tests/tls-protocols.</title>
<updated>2020-12-17T12:47:09Z</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-12-17T12:47:09Z</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=30c2bc3c362a4eb6b35560cff0bd95404360fe22'/>
<id>urn:sha1:30c2bc3c362a4eb6b35560cff0bd95404360fe22</id>
<content type='text'>
It's best to use a stock (clean) environment when possible.  We only
need to test TLS protocol version &lt;1.2 for tests/tls-protocols.
</content>
</entry>
<entry>
<title>typofix</title>
<updated>2020-12-13T22:47:15Z</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-12-13T22:47:15Z</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=43516b78b6b626bb6df522e4f1c5166989d79eb5'/>
<id>urn:sha1:43516b78b6b626bb6df522e4f1c5166989d79eb5</id>
<content type='text'>
</content>
</entry>
<entry>
<title>test suite: ensure we haven't started speaking IMAP when the SSL/TLS handshake is aborted.</title>
<updated>2020-12-13T16:38:07Z</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-12-13T16:37:32Z</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=ba9d8af01141a6d5d5b98a0e249c311814b844a6'/>
<id>urn:sha1:ba9d8af01141a6d5d5b98a0e249c311814b844a6</id>
<content type='text'>
(Unless STARTTLS is used to upgrade the connection.)
</content>
</entry>
<entry>
<title>libinterimap: deprecate SSL_protocols and introduce SSL_protocol_{min,max}.</title>
<updated>2020-12-11T18:33:30Z</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-12-11T17:39:46Z</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=feeb91998a29ca040f6e5dd103e09507a6355e32'/>
<id>urn:sha1:feeb91998a29ca040f6e5dd103e09507a6355e32</id>
<content type='text'>
Using the libssl interface simplifies our protocol black/whitelist
greatly; this only allows simple min/max bounds, but holes are arguably
not very useful here.

Using the new settings bumps the required libssl version to 1.1.0.
</content>
</entry>
<entry>
<title>libinterimap: remove default SSL_protocols value.</title>
<updated>2020-12-11T17:32:16Z</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-12-11T14:09:15Z</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=e3b95b0da424e55682c8c7b025d9d272a4a35ffe'/>
<id>urn:sha1:e3b95b0da424e55682c8c7b025d9d272a4a35ffe</id>
<content type='text'>
Namely, use the system default instead of "!SSLv2 !SSLv3 !TLSv1 !TLSv1.1".

As of Debian Buster (OpenSSL 1.1.1) this does not make a difference,
however using the system default provides better compatibility with
future libssl versions.
</content>
</entry>
<entry>
<title>Test suite: add new tests for SSL/TLS.</title>
<updated>2019-11-13T05:23:57Z</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2019-11-10T04:39:41Z</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=a7c364bf90a4593cfbc7911b1b7536dc66b1c879'/>
<id>urn:sha1:a7c364bf90a4593cfbc7911b1b7536dc66b1c879</id>
<content type='text'>
SSL connections are accepted on TCP port 10993.  Also, fix STARTTLS
directive, broken since fba1c36…
</content>
</entry>
</feed>
