Welcome Guest. Please Login or Register  


You are here: Index > Webuzo > General Support > Topic : Security Issue on Dovecot 2.0.9

2


Threaded Mode | Print  

Security Issue on Dovecot 2.0.9
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Not all TLS are secure so maybe TLS should replaced with only secure TLS like TLSv1.2


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

Security Issue on Dovecot 2.0.9
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Quote From : peopleinside January 21, 2016, 9:30 am
Update: The issue of supported SSL3 seems now to be relative to the EXIM.

added on exim.conf this line:
PHP Code

 tls_require_ciphers TLS 

This solve the SSL 3 security issue, now my server never support SSL3 so you have issue on Exim.


This solve the SSL 3 issue but make email not working, infact I AM tring to send email and I AM unable to send email from the smartphone and from Thunderbird.

So the issue still is an issue until all not work fine.
If I do the openssl test

openssl s_client domain.ext:465 i see Timout 300 sec verify return code 21 unable to verify the first certificate , I don't know if is for this I still have issue on send email but maybe is not only this.

Wait for a solution.
Now SSL 3 is disabled with

tls_require_ciphers = TLS

but no more possibile to send email from my PC or smarphone.


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

Security Issue on Dovecot 2.0.9
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Seems an EXIM issue http://www.softaculous.com/board/index.php?tid=8585&title=Security_Issue_EXIM_4.72


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

« Previous    Next »

Threaded Mode | Print  

2


Jump To :


Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is April 2, 2024, 7:34 am.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 11  |  Page Created In:0.023