Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

STARTTLS does not work after update to Android 7.0 (K9 tries to use SSLv3)

See original GitHub issue

Expected behavior

Fetch mail via IMAP

Actual behavior

Connection fails with “Connection Refused”

Details

After updating to Android 7.0, K-9 does not connect to my IMAP server anymore. It seems that K9 is trying to use SSLv3.

Logcat:

http://hastebin.com/nisoniwalu.hb

Server-Log:

http://hastebin.com/axidinefij.hb

Dovecot settings:

ssl_cipher_list = ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS

Environment

K-9 Mail version: 5.111 as well as latest release.

Android version: 7.0

Account type (IMAP, POP3, WebDAV/Exchange): IMAP

Please notice that this works in both thunderbird and gmail.

Issue Analytics

State:
Created 7 years ago
Comments:8 (5 by maintainers)

Top GitHub Comments

1reaction

cketticommented, Sep 20, 2016

You most likely disabled too many ciphers, so that Android and your servers couldn’t find any in common and the handshake fails.

Closing this as it’s most likely not a bug in K-9 Mail. We already have issue #893 to add better error reporting on TLS errors.

0reactions

AlexJLPcommented, Sep 20, 2016

I don’t have any ciphers in my cipherlist that are disabled by SSLEngine: http://hastebin.com/iviyecocah.rb I realize that this is not an issue with k-9. Thank you for your help though!