Ubuntu
nagios-plugins package

  1. Bug #155699
  2. Comment #6

Comment 6 for bug 155699

Revision history for this message
Matthias Eble (psychotrahe) wrote :

This is rather an issue of the IMAP daemon IMO.

from http://openssl.org/docs/ssl/SSL_CTX_new.html:
SSLv23_method(void), SSLv23_server_method(void), SSLv23_client_method(void)

    A TLS/SSL connection established with these methods will understand the SSLv2, SSLv3, and TLSv1 protocol. A client will send out SSLv2 client hello messages and will indicate that it also understands SSLv3 and TLSv1. A server will understand SSLv2, SSLv3, and TLSv1 client hello messages. This is the best choice when compatibility is a concern.

So I'd say the server should accept v2 Hellos and end the connection if v2 is the only protocol the client can talk.
However maybe adding "--dont-use-sslvX" arguments would be a nice feature enhancement for nagios plugins.

Matthias