Re: [courier-users] SSL3_GET_RECORD:wrong version number with iPhone

[Martin S. (I. IT OS D. CD) <Mar...@in...>]

David E.Wheeler wrote:
> In the meantime, is there nothing I can do with 4.1.3 to get it to be
> more tolerant?
> 
Don't know if this applies to your problem, but I got SSL working for 0.56.0
by adding a line to tcpd/libcouriertls.c:

--- tcpd/libcouriertls.c     2007/05/27 21:54:08     1.20
+++ tcpd/libcouriertls.c     2007/06/30 03:24:11     1.21
@@ -419,6 +419,7 @@
        ctx=SSL_CTX_new(protocol && strcmp(protocol, "SSL2") == 0
                                                        ? SSLv2_method():
                protocol && strcmp(protocol, "SSL3") == 0 ? SSLv3_method():
+               protocol && strcmp(protocol, "SSL23") == 0 ? SSLv23_method():
                TLSv1_method());

        if (!ctx)

(you have to "apt-get source courier-imap", apply the patch and recompile --
ask google how to rebuild packages with Debian if you need instructions :)

hth,
-- 
Martin Schuster
Infineon Technologies IT-Services GmbH
Tel: +43 5 1777 3517
<Mar...@in...>

Lakeside B05
9020 Klagenfurt, Austria

FB: LG Klagenfurt, FN 246787y

VISIT US AT http://www.infineon.com/austria