K9Mail "Unable to connect" to Dovecot on Android 7.0 #10

Closed
opened 2023-03-18 15:41:54 +00:00 by adrien · 1 comment
Owner

Using an ASUS_X008D on Android 7.0 (2017) and K-9 Mail 6.400 (latest).

Dovecot says:

2023-03-18 15:26:17 imap-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=<my_ip>, lip=<internal_ip>, TLS handshaking: SSL_accept() failed: error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher, session=<...>

Sources of information:

Using an ASUS_X008D on Android 7.0 (2017) and K-9 Mail 6.400 (latest). Dovecot says: > 2023-03-18 15:26:17 imap-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=<my_ip>, lip=<internal_ip>, TLS handshaking: SSL_accept() failed: error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher, session=<...> Sources of information: * [Issue on the topic on K9Mail's GitHub](https://github.com/thundernest/k-9/issues/3202) Suggests creating a new DH Param with 4096 bits... * [Recommended DH params for dovecot.conf](https://weakdh.org/sysadmin.html#dovecot) * [Dovecot docs: SSL security configuration](https://doc.dovecot.org/configuration_manual/dovecot_ssl_configuration/#ssl-security-settings)
Owner

The problem is linked to Android 7.0 that lack proper ECC support.
Solved with a hack for now.

The problem is linked to Android 7.0 that lack proper ECC support. Solved with a hack for now.
Sign in to join this conversation.
No Label
No Milestone
No project
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: Deuxfleurs/nixcfg#10
No description provided.