Problem with PHP 5.6 and TLS 1.2 (and 1.3)

Browsers, but also hosting providers change the TLS versions step by step so that outdated versions (1.0 and 1.1) are disabled. We have also done that in the meantime. After we have done that, Roundcube works fine on PHP 5.6 without ident_switch. But with this plugin we can no longer switch. (logging in as the first account does work)

The maillog indicates the following error:

TLS handshaking: SSL_accept() failed: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher, session=<0eH0AjqeNNAuEQgy>

cat /var/www/html/roundcube/logs/errors.log

[11-Feb-2020 09:09:57 +0100]: <eu6n3qh9> IMAP Error: Login failed for boris@identswitch.com against tls://identswitch.com from 1.1.1.1(X-Forwarded-For: 1.1.1.1). Could not connect to tls://identswitch.com:993: Unknown reason in /var/www/html/roundcubemail-1.4.2/program/lib/Roundcube/rcube_imap.php on line 200 (GET /roundcube/?_task=mail&_mbox=INBOX)

I have changed the IP Address in the error message as well as the email address.

As soon as we adjust PHP 5.6 in PHP 7.3, the problem is solved and everything works properly. The strange thing is therefore that tls: //identswitch.com is also in the config.inc.php of Roundcube and it then works with PHP 5.6. Why does it work then? and not with this plugin?

Can this be solved?

Comments (3)