dovecot - Jul 2020 - problem with client using TLS

18.07.2020, 14:30, Benny Pedersen <me at junc.eu>ratatouille skrev den
  2020-07-18 13:20:

  > Commenting just ssl_min_protocol = TLSv1.2 seems to solve the problem.
  > So I have the default ssl_min_protocol = TLSv1

  with means that the device running k9 is not supporting TLS 1.2 yet

TLS 1.2 is enabled by default in Android versions 5.0 and newer.
For earlier Android versions, K9 has (or used to have) a setting to
"harden" its
SSL/TLS settings, which enables TLS 1.2 as far back as 4.3 or something.
-- K
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20200718/9c36a6e8/attachment.html>

"Konstantin Vasilyev" <kmansoft at rambler.ru> schrieb am
18.07.20 um 16:16:55 Uhr:
>   18.07.2020, 14:30, Benny Pedersen <me at junc.eu>ratatouille skrev
den
>   2020-07-18 13:20:
> 
>   > Commenting just ssl_min_protocol = TLSv1.2 seems to solve the
problem.
>   > So I have the default ssl_min_protocol = TLSv1  
> 
>   with means that the device running k9 is not supporting TLS 1.2 yet
> 
> TLS 1.2 is enabled by default in Android versions 5.0 and newer.
> For earlier Android versions, K9 has (or used to have) a setting to
"harden" its
> SSL/TLS settings, which enables TLS 1.2 as far back as 4.3 or something.
> -- K
The android runs Version 4.0.3 ;) Don't know how to enable TLS 1.2.

  Andreas

18.07.2020, 16:32, ratatouille <ratatouille at
bitclusive.de>"Konstantin
  Vasilyev" <kmansoft at rambler.ru> schrieb am 18.07.20 um 16:16:55
Uhr:

  > 18.07.2020, 14:30, Benny Pedersen <me at junc.eu>ratatouille skrev
den
  > 2020-07-18 13:20:
  >
  > > Commenting just ssl_min_protocol = TLSv1.2 seems to solve the
problem.
  > > So I have the default ssl_min_protocol = TLSv1
  >
  > with means that the device running k9 is not supporting TLS 1.2 yet
  >
  > TLS 1.2 is enabled by default in Android versions 5.0 and newer.
  > For earlier Android versions, K9 has (or used to have) a setting to
  "harden" its
  > SSL/TLS settings, which enables TLS 1.2 as far back as 4.3 or something.
  > -- K

  The android runs Version 4.0.3 ;) Don't know how to enable TLS 1.2.

  Andreas


Oh well.
Android supports TLS 1.2 at all since version 4.1 - so the setting I'd
mentioned
above won't have helped anyway.
https://developer.android.com/reference/javax/net/ssl/SSLSocket
-- K
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20200718/263bd5a4/attachment-0001.html>

Konstantin Vasilyev skrev den 2020-07-18 15:16:
> TLS 1.2 is enabled by default in Android versions 5.0 and newer.
if its androud before 5.0 there we go
> For earlier Android versions, K9 has (or used to have) a setting to
> "harden" its SSL/TLS settings, which enables TLS 1.2 as far back
as
> 4.3 or something.
does not work if its not android 5.0 or never

ratatouille skrev den 2020-07-18 15:31:
> The android runs Version 4.0.3 ;) Don't know how to enable TLS 1.2.
install a never android version, hope the best