Web lists-archives.com

Re: isync/mbsync's TLS config (was Re: OpenSSL disables TLS 1.0 and 1.1)




On 2017-08-07 20:12, James McCoy wrote:
> On Mon, Aug 07, 2017 at 03:11:18PM -0400, Ralph Amissah wrote:
> > I believe this is the reason I am currently unable to backup my
> > gmail account with isync/ mbsync
> 
> That's because isync defaults to TLSv1 unless you tell it to do
> otherwise.
> 
> https://sources.debian.net/src/isync/1.2.1-2/src/drv_imap.c/?hl=2675#L2877
> 
> Add "SSLVersions TLSv1.2" to your IMAPAccount stanza and it will start
> working again.
> 

Perfect. Thanks for taking the trouble.

Thanks,
Ralph

P.S. For my (fairly old) config originally from Arch wiki there I had to add
two lines:

SSLType IMAPS
SSLVersions TLSv1.2

and to remove two others:

# UseIMAPS yes
# CertificateFile /etc/ssl/certs/ca-certificates.crt

There were messages about configuration settings being mutually exclusive
and others depreciated.

> Cheers,
> -- 
> James
> GPG Key: 4096R/91BF BF4D 6956 BD5D F7B7  2D23 DFE6 91AE 331B A3DB