search

gggard / AndroidCaldavSyncAdapater

Caldav synch adapter for Android
246 stars 88 forks source link

Please enable TLSv1.x protocols and disable SSLv3 if possible #240

Open arno01 opened 9 years ago

arno01 commented 9 years ago

(referring to #227 )

I had to enable SSLv3 protocol (which is already obsolete and insecure) to make CalDav work ...

Thanks for enabling TLSv1.x protocols !

freekvh commented 9 years ago

I have the same issue. I updated my Nginx config (for ownCloud) to get an A rating on ssllabs, but this stops this adapter from working.

arno01 commented 9 years ago

@freekert and Everyone else having the same issue, I strongly recommend to use DAVDroid instead https://f-droid.org/repository/browse/?fdid=at.bitfire.davdroid https://davdroid.bitfire.at/what-is-davdroid

It supports TLSv1.2 and SNI. It is free of charge if you download it using the F-Droid instead of Google Play. And it is open source as well. For me it works like a charm!

freekvh commented 9 years ago

@arno01 Thanx, Davdroid works well using only TLS, but only for carddav, it does not offer me an option to sync caldav. Any advice?

arno01 commented 9 years ago

@freekert DAVdroid works perfectly with CalDav <--> ownCloud (the protocol, not the Caldav app) for me. Just remove your CalDav app that supports only SSLv3. Also might be helpful: https://davdroid.bitfire.at/configuration