[Users] [Bug 4251] New: SNI support added in v3.17.3 is missing from Windows build of v3.17.4

[noreply at thewildbeast.co.uk]

https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4251

            Bug ID: 4251
           Summary: SNI support added in v3.17.3 is missing from Windows
                    build of v3.17.4
           Product: Claws Mail (Windows)
           Version: 3.17.4
          Hardware: PC
                OS: Windows 10
            Status: NEW
          Severity: critical
          Priority: P3
         Component: default
          Assignee: users at lists.claws-mail.org
          Reporter: ramyar.s at outlook.com

Hi,
My experience with Windows build of Claws Mail and searching the web suggests
that TLS SNI support is disabled in the Windows version of v3.17.4. Here is my
experience:

v3.17.3 works with imap.gmail.com. v3.17.4 says that the certificate has
changed to one signed by invalid2.invalid.

My search results:

ebol4anthr4x, reddit: Google has configured their servers to respond with an
invalid certificate if your IMAP client doesn't support SNI.

Viktor Dukhovni, openssl.org: Specifically, the Google SMTP servers serving
millions of domains (including gmail.com), now only do TLS 1.3 when SNI is
presented, and when SNI is missing, not only negotiate TLS 1.2, but use an
unexpected self-signed cert chain ...

Bug 4103 (resolved fixed) maybe useful.

Help please.

Regards
Ramyar

-- 
You are receiving this mail because:
You are the assignee for the bug.