Re: [SM-imapproxy] [PATCH] TLS improvements

[<ma...@ne...>]

Emmanuel Dreyfus <ma...@ne...> wrote:

> II will post a new patch that uses SSLv23_client_method(). 

Here is it:
http://ftp.espci.fr/shadow/manu/imapproxy3.patch

Summary so far:
- Negociate highest TLS protocol available, up to TLSv1.2
- SSLv2 and SSLv3 are disabled
- use ECDHE ciphers support if OpenSSL support it
- configurable cipher suite, with added tls_ciphers option
- server cert validation, with added tls_verify_server

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
ma...@ne...