imap tls context

[basaran]

🚀 Feature

Various packaged MTA distributions (such as mailcow) are set to use the latest and the greatest TLS.

Such an entry would be set through dovecot as:

ssl_min_protocol = TLSv1.2

Design, Layout, Architecture

In the long run, IMAP handler module should try establishing different versions, from the latest to least before returning an error.

Also, the returned error should be more descriptive.

modules/imap/handler_modules.php:

Hm_Msgs::add("ERRUnable to save this server, are the username and password correct?");

In the shortrun, a setting can be added to the add server dialog, and let the user to choose the TLS version.

P.S Thank you for cypth, it's great.

[jasonmunro]

This has come up before and I agree we should get it done. I think maybe we should skip right to auto-determination as most folks will have no idea what to choose. Authentication errors are intentionally vague for obvious reasons, but I admit this is a PITA to troubleshoot.

[basaran]

if you would like and you don't think you can do it sooner, I will be happy to be assigned this task. I'm hoping to have an opening next month.

[jasonmunro]

I would love your help with this, thanks for the offer! I have a ton of other stuff to work on so I will absolutely accept your offer to help. Let me know if you have questions or run into problems.

[jgrossophoff]

Is there a quick workaround for this using the sailfrog Docker image? My email provider turned off TLS support for anything below v1.2 altogether so I'm sadly forced to change my email client if there is none.

[Joshndroid]

I have a feeling this is what is causing me issues on a fresh install with my email hoster..... i keep getting the generic message about username/password, yet it is correct.... Any updates on this?... kinda a show stopper otherwise

[marclaporte]

@basaran We need you :-)