Update to IO::Socket::SSL breaks sendEmail

Bug #1009952 reported by Peter Bance
16
This bug affects 3 people
Affects Status Importance Assigned to Milestone
sendemail (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

On Ubuntu 12.04 (Precise), I recently updated IO::Socket::SSL to the latest available version (1.74). It appears stricter syntax checking is now being applied to the SSL_version parameter to the start_SSL method, and the usage in sendEmail is incorrect. Line 1907 needs to be modifed from:

1907: if (! IO::Socket::SSL->start_SSL($SERVER, SSL_version => 'SSLv3 TLSv1')) {

to something like:

1907: if (! IO::Socket::SSL->start_SSL($SERVER, SSL_version => 'SSLv23:!SSLv2')) {

Note that the "SSLv23:!SSLv2" string is the default in IO::Socket::SSL, and inherently includes TLSv1. There may be better/alternative specifications that can be used, but the current string is syntactically invalid, which now causes IO::Socket::SSL to fail (previously, this would have been ignored).

I hope this helps.

Revision history for this message
John Moser (nigelenki) wrote :

Confirmed. I had to fix this as well, SSLv23:!SSLv2 makes it work.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in sendemail (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.