search

cypht-org / cypht

Cypht: Lightweight Open Source webmail aggregator [PHP, JS]
http://cypht.org
GNU Lesser General Public License v2.1
949 stars 146 forks source link

imap tls context #485

Open basaran opened 3 years ago

basaran commented 3 years ago

🚀 Feature

Various packaged MTA distributions (such as mailcow) are set to use the latest and the greatest TLS.

Such an entry would be set through dovecot as:

ssl_min_protocol = TLSv1.2

Design, Layout, Architecture

In the long run, IMAP handler module should try establishing different versions, from the latest to least before returning an error.

Also, the returned error should be more descriptive.

modules/imap/handler_modules.php:

Hm_Msgs::add("ERRUnable to save this server, are the username and password correct?");

In the shortrun, a setting can be added to the add server dialog, and let the user to choose the TLS version.

P.S Thank you for cypth, it's great.

jasonmunro commented 3 years ago

This has come up before and I agree we should get it done. I think maybe we should skip right to auto-determination as most folks will have no idea what to choose. Authentication errors are intentionally vague for obvious reasons, but I admit this is a PITA to troubleshoot.

basaran commented 3 years ago

if you would like and you don't think you can do it sooner, I will be happy to be assigned this task. I'm hoping to have an opening next month.

jasonmunro commented 3 years ago

I would love your help with this, thanks for the offer! I have a ton of other stuff to work on so I will absolutely accept your offer to help. Let me know if you have questions or run into problems.

jgrossophoff commented 2 years ago

Is there a quick workaround for this using the sailfrog Docker image? My email provider turned off TLS support for anything below v1.2 altogether so I'm sadly forced to change my email client if there is none.

Joshndroid commented 2 years ago

I have a feeling this is what is causing me issues on a fresh install with my email hoster..... i keep getting the generic message about username/password, yet it is correct.... Any updates on this?... kinda a show stopper otherwise

marclaporte commented 1 year ago

@basaran We need you :-)

marclaporte commented 1 month ago

@basaran

Please retest, as a lot has changed since you reported this issue. Notably, we now have 3 active branches and recently released Cypht 2.0.0