cannot connect to the mail server

[Juraj Koska]

Hi,
   After upgrade lubuntu on 20.04 both email clients Trojita and Sylpheed cannot connect to the mail server. from the log:
creating IMAP4 connection to imap4.orangemail.sk:993 ...
** LibSylph-WARNING: SSL_connect() failed with error 1, ret = -1 (error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol)

problem with ssl?
OpenSSL 1.1.1f 31 Mar 2020

I try:
openssl s_client -host imap4.orangemail.sk -port 993 -prexit
CONNECTED(00000003)
140518603695424:error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol:../ssl/statem/statem_lib.c:1941:
......

lsb_release -rd
Description: Ubuntu 20.04 LTS
Release: 20.04

By

[Dimitri John Ledkov (xnox)]

Hi,

After inspecting imap4.orangemail.sk host, it appears to only support TLS1.0 and does not support TLS1.1 or TLS1.2 which have been release more than 12 years ago and widely adopted. It only supports TLS1.0 which has been deprecated this year and is no longer supported by default as it is weak and insecure.

Please contact orangemail.sk requesting for them to support TLSv1.2.

The problem is with them, not Ubuntu. Ubuntu is trying to protect your communication to be secure.

If you wish to downgrade security and allow broken cryptography you can use the following documentation to allow connecting to said host in an insecure manner that is easier to hack https://discourse.ubuntu.com/t/default-to-tls-v1-2-in-all-tls-libraries-in-20-04-lts/12464/8?u=xnox

[Dimitri John Ledkov (xnox)]

Please use https://www.orange.sk/napiste-nam/internetove-sluzby/vseobecne-informacie-o-internetovych-sluzbach-a-ich-dostupnosti with your mobile phone number requesting orange to add support for TLSv1.2