search for: rootet

...d it crashes. What to do? In essence, if ssl_proxy_destroy is called it shouldn't try to finish the handshake if the handshake hasn't even started due to an error. This can be done by a simple if check, see attached patch. I think this should do it. I have seen that a bug that is probably rootet in this has been posted here before regarding ssl3-disabled configs: http://dovecot.org/pipermail/dovecot/2015-March/100188.html cu, -- Hanno B?ck http://hboeck.de/ mail/jabber: hanno at hboeck.de GPG: BBB51E42 -------------- next part -------------- A non-text attachment was scrubbed... Name: d...

...ted by disabling SSLv3 in the dovecot config > (ssl_protocols = !SSLv2 !SSLv3) and trying to connect with openssl and > forced sslv3 (openssl s_client -ssl3 -connect localhost:995). This > would cause a crash. Thank you for your work on this. > I have seen that a bug that is probably rootet in this has been posted > here before regarding ssl3-disabled configs: > http://dovecot.org/pipermail/dovecot/2015-March/100188.html I made that earlier report. Here is another similar report: http://dovecot.org/pipermail/dovecot/2015-April/100576.html James.

...t config >> (ssl_protocols = !SSLv2 !SSLv3) and trying to connect with openssl and >> forced sslv3 (openssl s_client -ssl3 -connect localhost:995). This >> would cause a crash. > > Thank you for your work on this. > > >> I have seen that a bug that is probably rootet in this has been posted >> here before regarding ssl3-disabled configs: >> http://dovecot.org/pipermail/dovecot/2015-March/100188.html > > I made that earlier report. Here is another similar report: > > http://dovecot.org/pipermail/dovecot/2015-April/100576.html I was una...