Bug#1001267: php7.4-imap: starttls is unable to connect with imap servers which support only TLS 1.2 and TLS 1.3

[Falk Hackenberger]

Package: php7.4-imap
Version: 7.4.25-1+deb11u1
Severity: normal

Dear Maintainer,

I try to use php7.4-imap to connect with a imap server which supports only starttls over port 143 and supports only TLS 1.2 or newer.
php -r '$user="username";$pass="Password";$mbox=imap_open( "{server.example.com:143/imap/tls/novalidate-cert}", $user, $pass, OP_DEBUG);echo ($mbox !== false)?"OK":imap_last_error();'
This fails with:
"PHP Warning: imap_open(): Couldn't open stream" und "TLS/SSL failure for server.example.com: SSL negotiation failed".

According to [1], the reason is the old libc-client2007e, which can not handle newer TLS Versions on startttls.

[1] https://bugs.php.net/bug.php?id=76928

-- Package-specific info:
==== Additional PHP 7.4 information ====

++++ PHP @PHP_VERSION SAPI (php7.4query -S): ++++

++++ PHP 7.4 Extensions (php7.4query -M -v): ++++

++++ Configuration files: ++++
**** /etc/php/7.4/mods-available/imap.ini ****
extension=imap.so


-- System Information:
Debian Release: 11.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-9-amd64 (SMP w/4 CPU threads)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages php7.4-imap depends on:
ii libc-client2007e 8:2007f~dfsg-7+b1
ii libc6 2.31-13+deb11u2
ii php-common 2:76
ii php7.4-common 7.4.25-1+deb11u1
ii ucf 3.0043

php7.4-imap recommends no packages.

php7.4-imap suggests no packages.

Versions of packages php7.4-common depends on:
ii libc6 2.31-13+deb11u2
ii libffi7 3.3-6
ii libssl1.1 1.1.1k-1+deb11u1
ii php-common 2:76
ii ucf 3.0043

Versions of packages php7.4-cli depends on:
ii libargon2-1 0~20190702-0.1+0~20190710.3+debian9~1.gbp2fb167
ii libc6 2.31-13+deb11u2
ii libedit2 3.1-20191231-2+b1
ii libmagic1 1:5.39-3
ii libpcre2-8-0 10.36-2
ii libsodium23 1.0.18-1
ii libssl1.1 1.1.1k-1+deb11u1
ii libxml2 2.9.10+dfsg-6.7
ii mime-support 3.66
ii php7.4-common 7.4.25-1+deb11u1
ii php7.4-json 7.4.25-1+deb11u1
ii php7.4-opcache 7.4.25-1+deb11u1
ii php7.4-readline 7.4.25-1+deb11u1
ii tzdata 2021a-1+deb11u2
ii ucf 3.0043
ii zlib1g 1:1.2.11.dfsg-2

Versions of packages php7.4-cli suggests:
pn php-pear <none>

Versions of packages php7.4-fpm depends on:
ii libacl1 2.2.53-10
ii libapparmor1 2.13.6-10
ii libargon2-1 0~20190702-0.1+0~20190710.3+debian9~1.gbp2fb167
ii libc6 2.31-13+deb11u2
ii libmagic1 1:5.39-3
ii libpcre2-8-0 10.36-2
ii libsodium23 1.0.18-1
ii libssl1.1 1.1.1k-1+deb11u1
ii libsystemd0 247.3-6
ii libxml2 2.9.10+dfsg-6.7
ii mime-support 3.66
ii php7.4-cli 7.4.25-1+deb11u1
ii php7.4-common 7.4.25-1+deb11u1
ii php7.4-json 7.4.25-1+deb11u1
ii php7.4-opcache 7.4.25-1+deb11u1
ii procps 2:3.3.17-5
ii tzdata 2021a-1+deb11u2
ii ucf 3.0043
ii zlib1g 1:1.2.11.dfsg-2

Versions of packages php7.4-fpm suggests:
pn php-pear <none>

-- no debconf information

[Ondřej Surý]

Control: reassign -1 libc-client2007e
Control: affects -1 php7.4-imap php8.0-imap

Well, you said it yourself - it’s libc-client problem, not php7.4-imap problem.

--
Ondřej Surý <ond...@sury.org> (He/Him)

> On 7. 12. 2021, at 11:27, Falk Hackenberger <deb...@spam.huckley.de> wrote:
>
> Package: php7.4-imap