From f8911c2a7f9d41e2197d0c3e1aa49aea62e320fa Mon Sep 17 00:00:00 2001 From: Francis Russell <francis@unchartedbackwaters.co.uk> Date: Thu, 14 Jan 2016 06:47:49 -0500 Subject: [PATCH] Enable use of TLSv1.1 and TLSv1.2 for IMAP. --- CHANGELOG | 1 + program/lib/Roundcube/rcube_imap_generic.php | 8 +++++++- 2 files changed, 8 insertions(+), 1 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 01974c0..7883331 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -3,6 +3,7 @@ - Fix missing language name in "Add to Dictionary" request in HTML mode (#1490634) +- Enable use of TLSv1.1 and TLSv1.2 for IMAP. RELEASE 1.1.4 ------------- diff --git a/program/lib/Roundcube/rcube_imap_generic.php b/program/lib/Roundcube/rcube_imap_generic.php index 5d27c52..86a1fcf 100644 --- a/program/lib/Roundcube/rcube_imap_generic.php +++ b/program/lib/Roundcube/rcube_imap_generic.php @@ -910,7 +910,13 @@ return false; } - if (!stream_socket_enable_crypto($this->fp, true, STREAM_CRYPTO_METHOD_TLS_CLIENT)) { + // There is no flag to enable all TLS methods. Net_SMTP + // handles enabling TLS similarly. + $crypto_method = STREAM_CRYPTO_METHOD_TLS_CLIENT + | @STREAM_CRYPTO_METHOD_TLSv1_1_CLIENT + | @STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT; + + if (!stream_socket_enable_crypto($this->fp, true, $crypto_method)) { $this->setError(self::ERROR_BAD, "Unable to negotiate TLS"); $this->closeConnection(); return false; -- Gitblit v1.9.1