[Pkg-openssl-devel] Bug#912067: Bug#912067: Bug#912067: libssl1.1: please add getmail/getmail4 to the dependencies to check

[Sebastian Andrzej Siewior]

On 2018-10-27 17:18:22 [-0400], ant wrote:
>   here is the message:
> 
> =====
> getmail version 5.6
> Copyright (C) 1998-2012 Charles Cazabon.  Licensed under the GNU GPL version 2.
> SimplePOP3SSLRetriever:ant at anthive.com@mail.anthive.com:995:
> rc-03ant: socket error ([SSL: UNSUPPORTED_PROTOCOL] unsupported protocol (_ssl.c:726))
>   0 messages (0 bytes) retrieved, 0 skipped
> =====

from https://www.htbridge.com/ssl/?id=0v7rEeNT
|The server's Diffie-Hellman parameter is too small.
|The server supports protocols that have known weaknesses and are considered unsafe.
|The server supports cipher suites that are not approved by PCI DSS requirements, NIST guidelines and HIPAA guidance.
|The TLS engine does not support newer version than TLSv1.0 and seems outdated.
|The server's certificate is untrusted.
|The server has TLS 1.0 enabled. Since the 30th of June 2018 it is non-compliant with PCI DSS 3.2.1.
|The server is vulnerable to POODLE over SSL.
…
|List of all SSL/TLS protocols supported by the server:
|
|SSLv3
|TLSv1.0
|DIFFIE-HELLMAN PARAMETER WEAK
|The Diffie-Hellman parameter's size is only 1024 bits . A longer one must be generated to prevent Logjam vulnerability.Non-compliant with PCI DSS requirements
|POODLE OVER SSL 
|The server is vulnerable to POODLE over SSL. SSLv3 should be disabled.Non-compliant with PCI DSS requirements

>   thanks for your response,
> 
> 
>   ant

Sebastian