<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=en-FI link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span lang=EN-GB>Hi.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>I do not know if guam uses dynamic linking to openssl or other such cryptolibrary (I would seriously hope so), but tls1.3 isnt exactly out of the draft phase just yet. As for wether guam can use whatever ciphers the cryptolibrary offers (re: to the question of tls1.2), I have not personally tested this actually since I use syncroton for main box connectivity (which uses apache as the frontend, thus whatever ciphers apache offers). Other insights and/or documentation about this would be nice though, since guam is documented practically in absolutely no way so we are left to looking at the code and figuring out how it functions. I lately filed an issue (not exactly officially or through an issue tracker...) about the default cyrus and guam config being somewhat nonsensical in regards to kolab as a system.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal># UNIX sockets start with a slash and are put into /var/lib/imap/sockets</p><p class=MsoNormal>SERVICES {</p><p class=MsoNormal> imap cmd="imapd" listen="localhost:9143" prefork=5</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> imaps cmd="imapd -s" listen="localhost:9993" prefork=5</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> sieve cmd="timsieved" listen="sieve" prefork=0</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> ptloader cmd="ptloader" listen="/var/lib/imap/ptclient/ptsock" prefork=0</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> notify cmd="notifyd" listen="/var/lib/imap/socket/notify" proto="udp" prefork=1</p><p class=MsoNormal>}</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>This is how cyrus.conf should look like.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>%% Example configuration for Guam.</p><p class=MsoNormal>[</p><p class=MsoNormal> {</p><p class=MsoNormal> kolab_guam, [</p><p class=MsoNormal> {</p><p class=MsoNormal> imap_servers, [</p><p class=MsoNormal> {</p><p class=MsoNormal> imap, [</p><p class=MsoNormal> { host, "127.0.0.1" },</p><p class=MsoNormal> { port, 9143 },</p><p class=MsoNormal> { tls, starttls }</p><p class=MsoNormal> ]</p><p class=MsoNormal> },</p><p class=MsoNormal> {</p><p class=MsoNormal> imaps, [</p><p class=MsoNormal> { host, "127.0.0.1" },</p><p class=MsoNormal> { port, 9993 },</p><p class=MsoNormal> { tls, true }</p><p class=MsoNormal> ]</p><p class=MsoNormal> }</p><p class=MsoNormal> ]</p><p class=MsoNormal> },</p><p class=MsoNormal> {</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>And this is how the first part of guam sys.config should look like. I did not however find _<i>anything</i>_ pertaining to crypto configurations anywhere. tls_config in the listeners section (not in my snippet) is the interesting part in regards to guam but I honestly did not bother digging through the code to figure out if there were other sections configurable there.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>-Jupiter ‘zapotah’ Vuorikoski</p><p class=MsoNormal><o:p> </o:p></p><div style='mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='border:none;padding:0cm'><b>From: </b><a href="mailto:catwiesel@gmx.net">Matthias Busch</a><br><b>Sent: </b>Friday, 10 August 2018 19.03<br><b>To: </b><a href="mailto:users@lists.kolab.org">users@lists.kolab.org</a><br><b>Subject: </b>Status of GUAM and TLS>1.1 ?</p></div><p class=MsoNormal><o:p> </o:p></p></div></body></html>