<feed xmlns='http://www.w3.org/2005/Atom'>
<title>interimap/tests/tls-protocols/t, branch master</title>
<subtitle>Fast bidirectional synchronization for QRESYNC-capable IMAP servers</subtitle>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/'/>
<entry>
<title>tests/*/t: Replace filetype=sh with filetype=bash.</title>
<updated>2024-03-06T13:36:38+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2024-03-06T13:36:38+00:00</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=53a296f8b629e002b13f328c74ff905963f75dc4'/>
<id>53a296f8b629e002b13f328c74ff905963f75dc4</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>test suite: use stock OpenSSL config except for tests/tls-protocols.</title>
<updated>2020-12-17T12:47:09+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-12-17T12:47:09+00:00</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=30c2bc3c362a4eb6b35560cff0bd95404360fe22'/>
<id>30c2bc3c362a4eb6b35560cff0bd95404360fe22</id>
<content type='text'>
It's best to use a stock (clean) environment when possible.  We only
need to test TLS protocol version &lt;1.2 for tests/tls-protocols.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
It's best to use a stock (clean) environment when possible.  We only
need to test TLS protocol version &lt;1.2 for tests/tls-protocols.
</pre>
</div>
</content>
</entry>
<entry>
<title>typofix</title>
<updated>2020-12-13T22:47:15+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-12-13T22:47:15+00:00</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=43516b78b6b626bb6df522e4f1c5166989d79eb5'/>
<id>43516b78b6b626bb6df522e4f1c5166989d79eb5</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>test suite: ensure we haven't started speaking IMAP when the SSL/TLS handshake is aborted.</title>
<updated>2020-12-13T16:38:07+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-12-13T16:37:32+00:00</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=ba9d8af01141a6d5d5b98a0e249c311814b844a6'/>
<id>ba9d8af01141a6d5d5b98a0e249c311814b844a6</id>
<content type='text'>
(Unless STARTTLS is used to upgrade the connection.)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
(Unless STARTTLS is used to upgrade the connection.)
</pre>
</div>
</content>
</entry>
<entry>
<title>libinterimap: deprecate SSL_protocols and introduce SSL_protocol_{min,max}.</title>
<updated>2020-12-11T18:33:30+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-12-11T17:39:46+00:00</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=feeb91998a29ca040f6e5dd103e09507a6355e32'/>
<id>feeb91998a29ca040f6e5dd103e09507a6355e32</id>
<content type='text'>
Using the libssl interface simplifies our protocol black/whitelist
greatly; this only allows simple min/max bounds, but holes are arguably
not very useful here.

Using the new settings bumps the required libssl version to 1.1.0.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Using the libssl interface simplifies our protocol black/whitelist
greatly; this only allows simple min/max bounds, but holes are arguably
not very useful here.

Using the new settings bumps the required libssl version to 1.1.0.
</pre>
</div>
</content>
</entry>
<entry>
<title>libinterimap: remove default SSL_protocols value.</title>
<updated>2020-12-11T17:32:16+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-12-11T14:09:15+00:00</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=e3b95b0da424e55682c8c7b025d9d272a4a35ffe'/>
<id>e3b95b0da424e55682c8c7b025d9d272a4a35ffe</id>
<content type='text'>
Namely, use the system default instead of "!SSLv2 !SSLv3 !TLSv1 !TLSv1.1".

As of Debian Buster (OpenSSL 1.1.1) this does not make a difference,
however using the system default provides better compatibility with
future libssl versions.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Namely, use the system default instead of "!SSLv2 !SSLv3 !TLSv1 !TLSv1.1".

As of Debian Buster (OpenSSL 1.1.1) this does not make a difference,
however using the system default provides better compatibility with
future libssl versions.
</pre>
</div>
</content>
</entry>
<entry>
<title>Test suite: add new tests for SSL/TLS.</title>
<updated>2019-11-13T05:23:57+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2019-11-10T04:39:41+00:00</published>
<link rel='alternate' type='text/html' href='http://git.guilhem.org/interimap/commit/?id=a7c364bf90a4593cfbc7911b1b7536dc66b1c879'/>
<id>a7c364bf90a4593cfbc7911b1b7536dc66b1c879</id>
<content type='text'>
SSL connections are accepted on TCP port 10993.  Also, fix STARTTLS
directive, broken since fba1c36…
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
SSL connections are accepted on TCP port 10993.  Also, fix STARTTLS
directive, broken since fba1c36…
</pre>
</div>
</content>
</entry>
</feed>
