You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "Richard Zowalla (Jira)" <ji...@apache.org> on 2020/12/02 11:56:00 UTC
[jira] [Updated] (GERONIMO-6792) Fix hard-coded TLSv1 version in
MailConnection.java for Java Mail 1.6
[ https://issues.apache.org/jira/browse/GERONIMO-6792?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Richard Zowalla updated GERONIMO-6792:
--------------------------------------
Description:
Hi,
I encountered some issues when using Geronimo Java Mail 1.6 (1.0.0) bundled with TomEE 8.0.5. The related thread [1] can be found on the [users@tomee.apache.org|mailto:users@tomee.apache.org] Mailing-List.
In short:
* Our mail server does only support TLS 1.2 or TLS 1.3
* Geronimo Java Mail 1.6 in version 1.0.0 has TLS 1.0 hard-coded in the source and does not use the default protocols or the specified ones via *mail.smtp.ssl.protocols* for a TLS connection.
I have attached a patch created via SVN DIFF.
[1] [https://www.mail-archive.com/users@tomee.apache.org/msg17544.html]
was:
Hi,
I encountered some issues when using Geronimo Java Mail 1.6 (1.0.0) bundled with TomEE 8.0.5. The related thread [1] can be found on the [users@tomee.apache.org|mailto:users@tomee.apache.org] Mailing-List.
In short:
* Our mail server does only support TLS 1.2 or TLS 1.3
* Geronimo Java Mail 1.6 in version 1.0.0 has TLS 1.0 hard-coded in the source and does not use the default protocols or the specified ones via *mail.smtp.ssl.protocols* for a TLS connection.
I have attached a patch created via SVN DIFF.
[1] [https://www.mail-archive.com/users@tomee.apache.org/msg17544.html]
> Fix hard-coded TLSv1 version in MailConnection.java for Java Mail 1.6
> ---------------------------------------------------------------------
>
> Key: GERONIMO-6792
> URL: https://issues.apache.org/jira/browse/GERONIMO-6792
> Project: Geronimo
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: mail
> Reporter: Richard Zowalla
> Priority: Major
> Attachments: GERONIMO-6792.diff
>
>
> Hi,
> I encountered some issues when using Geronimo Java Mail 1.6 (1.0.0) bundled with TomEE 8.0.5. The related thread [1] can be found on the [users@tomee.apache.org|mailto:users@tomee.apache.org] Mailing-List.
> In short:
> * Our mail server does only support TLS 1.2 or TLS 1.3
> * Geronimo Java Mail 1.6 in version 1.0.0 has TLS 1.0 hard-coded in the source and does not use the default protocols or the specified ones via *mail.smtp.ssl.protocols* for a TLS connection.
> I have attached a patch created via SVN DIFF.
> [1] [https://www.mail-archive.com/users@tomee.apache.org/msg17544.html]
--
This message was sent by Atlassian Jira
(v8.3.4#803005)