GNU bug report logs - #21134
24.5; Default value of imap-ssl-program

Previous Next

Package: emacs;

Reported by: Milan Zamazal <pdm <at> zamazal.org>

Date: Sat, 25 Jul 2015 19:29:01 UTC

Severity: important

Tags: security

Merged with 20078

Found in version 24.5

Fixed in version 25.1

Done: Lars Ingebrigtsen <larsi <at> gnus.org>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 21134 in the body.
You can then email your comments to 21134 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to bug-gnu-emacs <at> gnu.org:
bug#21134; Package emacs. (Sat, 25 Jul 2015 19:29:01 GMT) Full text and rfc822 format available.
Acknowledgement sent to Milan Zamazal <pdm <at> zamazal.org>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs <at> gnu.org. (Sat, 25 Jul 2015 19:29:01 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Milan Zamazal <pdm <at> zamazal.org>
To: bug-gnu-emacs <at> gnu.org
Subject: 24.5; Default value of imap-ssl-program
Date: Sat, 25 Jul 2015 21:28:32 +0200

The default value of imap-ssl-program is

  '("openssl s_client -quiet -ssl3 -connect %s:%p"
    "openssl s_client -quiet -ssl2 -connect %s:%p"
    "s_client -quiet -ssl3 -connect %s:%p"
    "s_client -quiet -ssl2 -connect %s:%p")

This doesn't work when SSL is disabled and only TLS is available on the
IMAP server, e.g. in current Debian.  Moreover, default IMAP setting
shouldn't enforce usage of deprecated protocols.

imap-ssl-program default value should be updated (maybe just omitting
the -ssl3 and -ssl2 options would be a good idea, but I'm not an
expert).
Forcibly Merged 20078 21134. Request was from Glenn Morris <rgm <at> gnu.org> to control <at> debbugs.gnu.org. (Sat, 25 Jul 2015 20:13:02 GMT) Full text and rfc822 format available.
bug marked as fixed in version 25.1, send any further explanations to 20078 <at> debbugs.gnu.org and William F Hammond <gellmu <at> gmail.com> Request was from Lars Ingebrigtsen <larsi <at> gnus.org> to control <at> debbugs.gnu.org. (Sat, 26 Dec 2015 20:50:02 GMT) Full text and rfc822 format available.
bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Sun, 24 Jan 2016 12:24:06 GMT) Full text and rfc822 format available.
This bug report was last modified 9 years and 152 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.