{"action":"created","issue":{"url":"https://api.github.com/repos/k9mail/k-9/issues/1292","repository_url":"https://api.github.com/repos/k9mail/k-9","labels_url":"https://api.github.com/repos/k9mail/k-9/issues/1292/labels{/name}","comments_url":"https://api.github.com/repos/k9mail/k-9/issues/1292/comments","events_url":"https://api.github.com/repos/k9mail/k-9/issues/1292/events","html_url":"https://github.com/k9mail/k-9/issues/1292","id":148842975,"number":1292,"title":"Cipher support in Android 4.4.4?","user":{"login":"ArchangeGabriel","id":490531,"avatar_url":"https://avatars.githubusercontent.com/u/490531?v=3","gravatar_id":"","url":"https://api.github.com/users/ArchangeGabriel","html_url":"https://github.com/ArchangeGabriel","followers_url":"https://api.github.com/users/ArchangeGabriel/followers","following_url":"https://api.github.com/users/ArchangeGabriel/following{/other_user}","gists_url":"https://api.github.com/users/ArchangeGabriel/gists{/gist_id}","starred_url":"https://api.github.com/users/ArchangeGabriel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ArchangeGabriel/subscriptions","organizations_url":"https://api.github.com/users/ArchangeGabriel/orgs","repos_url":"https://api.github.com/users/ArchangeGabriel/repos","events_url":"https://api.github.com/users/ArchangeGabriel/events{/privacy}","received_events_url":"https://api.github.com/users/ArchangeGabriel/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2016-04-16T11:15:25Z","updated_at":"2016-04-17T21:44:05Z","closed_at":null,"body":"### Expected behaviour\r\nMy IMAP server (dovecot) is requiring TLS 1.2, and only exposes these ciphers: ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256.\r\n\r\nThis is supposed to work on Android 4.4.4, and it works in web browser for instance.\r\n\r\n### Actual behaviour\r\nIt does not work in K9-Mail, but apart from “Connection failed”, it’s not very helpful. On server side I have this:\r\n`imap-login: Error: SSL: Stacked error: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher`.\r\n\r\nSo, no shared cipher, which is strange because a webserver (nginx) with the same configuration does work on this smartphone.\r\n\r\nI’m not sure where the issue lies, because it does work on newer version of Android, but this is on a phone I actually can’t upgrade (Geeksphone Revolution).\r\n\r\n### Environment\r\nK-9 Mail version: 5.010\r\n\r\nAndroid version: 4.4.4\r\n\r\nAccount type (IMAP, POP3, WebDAV/Exchange): IMAP"},"comment":{"url":"https://api.github.com/repos/k9mail/k-9/issues/comments/211120698","html_url":"https://github.com/k9mail/k-9/issues/1292#issuecomment-211120698","issue_url":"https://api.github.com/repos/k9mail/k-9/issues/1292","id":211120698,"user":{"login":"philipwhiuk","id":1316415,"avatar_url":"https://avatars.githubusercontent.com/u/1316415?v=3","gravatar_id":"","url":"https://api.github.com/users/philipwhiuk","html_url":"https://github.com/philipwhiuk","followers_url":"https://api.github.com/users/philipwhiuk/followers","following_url":"https://api.github.com/users/philipwhiuk/following{/other_user}","gists_url":"https://api.github.com/users/philipwhiuk/gists{/gist_id}","starred_url":"https://api.github.com/users/philipwhiuk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/philipwhiuk/subscriptions","organizations_url":"https://api.github.com/users/philipwhiuk/orgs","repos_url":"https://api.github.com/users/philipwhiuk/repos","events_url":"https://api.github.com/users/philipwhiuk/events{/privacy}","received_events_url":"https://api.github.com/users/philipwhiuk/received_events","type":"User","site_admin":false},"created_at":"2016-04-17T21:44:05Z","updated_at":"2016-04-17T21:44:05Z","body":"Without knowing much about Android (or the actual OS running - manufacturers often make changes with the stuff they put in/take out) it's probably possible. If SNI just worked anyway I can't imagine we'd have bothered adding code to turn it on."}}