interimap/tests/tls/t, branch debian/buster-backportsFast bidirectional synchronization for QRESYNC-capable IMAP servershttp://git.guilhem.org/interimap/atom?h=debian%2Fbuster-backports2020-12-11T17:44:13Ztest suite: supply our own OpenSSL configuration file with MinProtocol=None.2020-12-11T17:44:13ZGuilhem Moulinguilhem@fripost.org2020-12-11T17:28:32Zurn:sha1:ed263d4a380036b654525ee268db615c17d0d216
So we can test TLSv1 as well, not just TLSv1.2 and later.
Also, explicitly set ssl_min_protocol=TLSv1 in the Dovecot configuration
file (the default as of 2.3.11.3), hence running TLS tests now require
Dovecot 2.3 or later.
libinterimap: remove default SSL_protocols value.2020-12-11T17:32:16ZGuilhem Moulinguilhem@fripost.org2020-12-11T14:09:15Zurn:sha1:e3b95b0da424e55682c8c7b025d9d272a4a35ffe
Namely, use the system default instead of "!SSLv2 !SSLv3 !TLSv1 !TLSv1.1".
As of Debian Buster (OpenSSL 1.1.1) this does not make a difference,
however using the system default provides better compatibility with
future libssl versions.
test suite: use a RSA certificate rather than ECDSA.2020-12-09T13:57:11ZGuilhem Moulinguilhem@fripost.org2020-12-09T13:57:11Zurn:sha1:b13c9fa6f442f555af65f869b954935dae40fcc4
It's arguably the most common use-case. Generated with
$ openssl genpkey -algorithm RSA -out tests/snippets/dovecot/dovecot.rsa.key
$ openssl req -x509 -days 3650 -subj "/CN=InterIMAP test suite" \
-key tests/snippets/dovecot/dovecot.rsa.key \
-out tests/snippets/dovecot/dovecot.rsa.crt
Test suite: add new tests for SSL/TLS.2019-11-13T05:23:57ZGuilhem Moulinguilhem@fripost.org2019-11-10T04:39:41Zurn:sha1:a7c364bf90a4593cfbc7911b1b7536dc66b1c879
SSL connections are accepted on TCP port 10993. Also, fix STARTTLS
directive, broken since fba1c36…