Re: [Fetchmail-users] fetchmail ssl cipher

[Martin K. <mk...@gm...>]

On Sat, 27 Jul 2013, Martin Koeppe wrote:


> when using fetchmail 6.3.21/cygwin with --sslproto 'SSL3' or --sslproto 
> 'TLS1', is it possible to see which SSL cipher has been chosen for a 
> connection?
>
> Or is it possible to show all supported server ciphers for SSL connections? 
> With -vvv it shows the certificate, but apparently not the cipher.
>
> Would it also be possible to limit the list of client supported ciphers 
> offered to the server?

Hi,

just another 2 wishlist item related to SSL in fetchmail 7.x.

(1) Configuring to-be-used ciphers / tls version

(2) logging actually used cipher
In between I saw that exim can log the cipher in the Received: line.
Maybe fetchmail could do so, too:

Received: from [x.x.x.x] (helo=xyz)
     by frontend.clustermail.de with esmtpsa (TLSv1:AES128-SHA:128)
     (Exim 4.63)


Thanks for consideration

Martin