From 9c192cc8946800535be678644314ec38f6e48ec7 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Fri, 11 Dec 2020 19:06:29 +0100 Subject: documentation: simplify SSL options in the sample configuration files. --- pullimap.sample | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) (limited to 'pullimap.sample') diff --git a/pullimap.sample b/pullimap.sample index 136d3d4..d92e645 100644 --- a/pullimap.sample +++ b/pullimap.sample @@ -4,10 +4,9 @@ deliver-method = smtp:[127.0.0.1]:25 purge-after = 90 # SSL options -SSL_CApath = /etc/ssl/certs +#SSL_CApath = /etc/ssl/certs #SSL_verify = YES -#SSL_protocols = !SSLv2 !SSLv3 !TLSv1 !TLSv1.1 -#SSL_cipherlist = EECDH+AESGCM:!MEDIUM:!LOW:!EXP:!aNULL:!eNULL +#SSL_protocol_min = !TLSv1.3 [private] #type = imaps -- cgit v1.2.3 From 6dcf633e6dde4c2af549f374de885038f90b7258 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Sun, 13 Dec 2020 16:47:41 +0100 Subject: typofix --- pullimap.sample | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'pullimap.sample') diff --git a/pullimap.sample b/pullimap.sample index d92e645..d911851 100644 --- a/pullimap.sample +++ b/pullimap.sample @@ -6,7 +6,7 @@ purge-after = 90 # SSL options #SSL_CApath = /etc/ssl/certs #SSL_verify = YES -#SSL_protocol_min = !TLSv1.3 +#SSL_protocol_min = TLSv1.2 [private] #type = imaps -- cgit v1.2.3 From 8c43ed9baa905d907a6aad77de2282a852ba69a9 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Sun, 13 Dec 2020 17:43:52 +0100 Subject: libinterimap: use default locations for trusted CA certificates when neither CAfile nor CApath are set. In particular, OpenSSL's default locations can be overridden by the SSL_CERT_FILE resp. SSL_CERT_DIR environment variables, see SSL_CTX_load_verify_locations(3ssl). This bumps the minimum OpenSSL version to 1.1.0 (when SSL_verify is used). --- pullimap.sample | 1 - 1 file changed, 1 deletion(-) (limited to 'pullimap.sample') diff --git a/pullimap.sample b/pullimap.sample index d911851..f1a66f9 100644 --- a/pullimap.sample +++ b/pullimap.sample @@ -4,7 +4,6 @@ deliver-method = smtp:[127.0.0.1]:25 purge-after = 90 # SSL options -#SSL_CApath = /etc/ssl/certs #SSL_verify = YES #SSL_protocol_min = TLSv1.2 -- cgit v1.2.3