[Tickets #4017] RESOLVED: System capacilities test not working for IMAP servers that need TLS

[bugs@bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://dev.horde.org/horde/whups/ticket/?id=4017
-----------------------------------------------------------------------
 Ticket             | 4017
 Updated By         | Matt Selsky <selsky at columbia.edu>
 Summary            | System capacilities test not working for IMAP servers that need TLS
 Queue              | IMP
 Version            | HEAD
 State              | Resolved
 Priority           | 1. Low
 Type               | Bug
 Owners             | 
-----------------------------------------------------------------------


Matt Selsky <selsky at columbia.edu> (2006-06-08 09:35) wrote:

> It does seem, however, that imap_open() will fallback to tls if no 
> TLS parameter is given (i.e. 'imap' will first try a plaintext login 
> before attempting a TLS login before giving up).  So what we need to 
> do is simply remove the bare 'imap' and 'pop3' connection strings 
> from test.php.  The examples in servers.php already correctly show 
> that 'notls' is needed if we don't want to use TLS connections.
>
> I've gone ahead and removed the offending connection strings from 
> test.php in HEAD and IMP 4.1.2.

What about moving imap/notls to the end of the list since we should prefer
secure connection methods?  Then imap/ssl will be at the top of the list so
PHP4 users will have a secure supported connection method.  And we can add
imap back as imap/tls (not exactly the same since TLS will be required, but
probably close enough).

The resulting array would be:

            'imap/ssl' => 993,
            'imap/tls' => 143,
            'imap/ssl/novalidate-cert' => 993,
            'imap/tls/novalidate-cert' => 143,
            'imap/notls' => 143,