J M Cerqueira Esteves

TLS 1.0 usage hardcoded (crypto_type option in stream_socket_enable_crypto calls)

2

In - modules/imap/hm-imap.php - modules/pop3/hm-pop3.php - modules/smtp/hm-smtp.php `stream_socket_enable_crypto()` is called with `STREAM_CRYPTO_METHOD_TLS_CLIENT` as `crypto_type`. According to a note in http://php.net/manual/en/function.stream-socket-enable-crypto.php this restricts communication to TLS 1.0 (since PHP version 5.6.7)...