interimap/tests/tls-rsa+ecdsa/t, branch debian/0.5.7-4 Fast bidirectional synchronization for QRESYNC-capable IMAP servers Fix minor space damage. 2022-02-23T20:50:13+00:00 Guilhem Moulin guilhem@fripost.org 2022-02-23T20:42:46+00:00 09d85b13359aabb377aeea489cd1f9c9bd1b1d63 






libinterimap: new option SSL_ciphersuites to set the TLSv1.3 ciphersuites.
2020-12-17T16:41:30+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-17T16:38:17+00:00

57988c83bb4b3f1780f045880ac4a8f36a51c55c

Also, clarify that SSL_cipherlist only applies to TLSv1.2 and below.
See SSL_CTX_set_cipher_list(3ssl).





Also, clarify that SSL_cipherlist only applies to TLSv1.2 and below.
See SSL_CTX_set_cipher_list(3ssl).







libinterimap: deprecate SSL_protocols and introduce SSL_protocol_{min,max}.
2020-12-11T18:33:30+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-11T17:39:46+00:00

feeb91998a29ca040f6e5dd103e09507a6355e32

Using the libssl interface simplifies our protocol black/whitelist
greatly; this only allows simple min/max bounds, but holes are arguably
not very useful here.

Using the new settings bumps the required libssl version to 1.1.0.





Using the libssl interface simplifies our protocol black/whitelist
greatly; this only allows simple min/max bounds, but holes are arguably
not very useful here.

Using the new settings bumps the required libssl version to 1.1.0.







libinterimap: show the matching pinned SPKI in --debug mode.
2020-12-11T10:20:37+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-10T13:28:29+00:00

17b263c49df682fc45f0e50cceb01db4366ad9a7












New test with a server offering both RSA+ECDSA certificates.
2020-12-09T14:29:59+00:00

Guilhem Moulin
guilhem@fripost.org

2020-12-09T14:11:45+00:00

51df40cf82c67ae828c325a42e28b3155fce9864

This requires dovecot-imapd 2.2.31 or later.

Certificate generated with:

      $ openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:P-256 -pkeyopt ec_param_enc:named_curve \
            -out tests/snippets/dovecot/dovecot.ecdsa.key
      $ openssl req -x509 -days 3650 -subj "/CN=InterIMAP test suite" \
            -key tests/snippets/dovecot/dovecot.ecdsa.key \
            -out tests/snippets/dovecot/dovecot.ecdsa.crt





This requires dovecot-imapd 2.2.31 or later.

Certificate generated with:

      $ openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:P-256 -pkeyopt ec_param_enc:named_curve \
            -out tests/snippets/dovecot/dovecot.ecdsa.key
      $ openssl req -x509 -days 3650 -subj "/CN=InterIMAP test suite" \
            -key tests/snippets/dovecot/dovecot.ecdsa.key \
            -out tests/snippets/dovecot/dovecot.ecdsa.crt