You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "Martin Wiesner (Jira)" <ji...@apache.org> on 2020/12/02 12:41:00 UTC

[jira] [Commented] (GERONIMO-6792) Fix hard-coded TLSv1 version in MailConnection.java for Java Mail 1.6

    [ https://issues.apache.org/jira/browse/GERONIMO-6792?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17242326#comment-17242326 ] 

Martin Wiesner commented on GERONIMO-6792:
------------------------------------------

I strongly support the proposed enhancement.

> Fix hard-coded TLSv1 version in MailConnection.java for Java Mail 1.6
> ---------------------------------------------------------------------
>
>                 Key: GERONIMO-6792
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-6792
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues) 
>          Components: mail
>            Reporter: Richard Zowalla
>            Priority: Major
>         Attachments: GERONIMO-6792.diff
>
>
> Hi,
> I encountered some issues when using Geronimo Java Mail 1.6 (1.0.0) bundled with TomEE 8.0.5. The related thread [1] can be found on the [users@tomee.apache.org|mailto:users@tomee.apache.org] Mailing-List.
> In short: 
>  * Our mail server does only support TLS 1.2 or TLS 1.3
>  * Geronimo Java Mail 1.6 in version 1.0.0 has TLS 1.0 hard-coded in the source and does not use the default protocols or the specified ones via *mail.smtp.ssl.protocols* for a TLS connection.
> I have attached a patch created via SVN DIFF. 
> [1] [https://www.mail-archive.com/users@tomee.apache.org/msg17544.html]



--
This message was sent by Atlassian Jira
(v8.3.4#803005)