Tickets :: Comment on [#6338] Show the script in "Show Active Script"

* Your Email Address
* Spam protection	Enter the letters below: .__..___.__.. ..__ [__][__ \| \|\ /[ __ \| \|[___\|__\| \/ [_./
Comment	> The problem is in horde/pear/Net/Sieve.php as it does not fetch the > CAPABILITY string send after STARTTLS: > > > > http://tools.ietf.org/html/draft-martin-managesieve-08#section-2.2 > > > > "After the TLS layer is established, the server MUST re-issue the > > capability results, followed by an OK response. This is necessary to > > protect against man-in-the-middle attacks which alter the > > capabilities list prior to STARTTLS. This capability result MUST NOT > > include the STARTTLS capability." > > > > This patch allows TLS working: > > @@ -373,6 +373,11 @@ > > if (PEAR::isError($res = $this->_startTLS())) { > > return $res; > > } > > + // Get STARTTLS capability and parse > > + if (PEAR::isError($res = $this->_doCmd())) { > > + return $res; > > + } > > + $this->_parseCapability($res); > > } > > } > >
Attachment
Watch this ticket