diff --git a/FAQ.md b/FAQ.md index 424c1bb0c5..095b088e91 100644 --- a/FAQ.md +++ b/FAQ.md @@ -2100,6 +2100,8 @@ Try to switch to port 993 (IMAP) or 465 (SMTP) with SSL/TLS. Android 8 Oreo and later [do not support](https://developer.android.com/about/versions/oreo/android-8.0-changes#security-all) SSLv3 anymore. There is no way to workaround lacking RC4 and SSLv3 support because it has completely been removed from Android (which should say something). +Since version 1.2121 the Bouncy Castle secure socket provider ([JSSE](https://en.wikipedia.org/wiki/Java_Secure_Socket_Extension)) is bundled. +Enabling this socket provider in the connection-settings tab and enabling '*Allow insecure connections*' in the account/identity settings *might* solve this problem. The error '*javax.net.ssl.SSLHandshakeException: Read error: ... TLSV1_ALERT_INTERNAL_ERROR*' means that Android and the email server share no common protocol versions and/or common ciphers. diff --git a/index.html b/index.html index 64d3f4b60c..53a56d9c9e 100644 --- a/index.html +++ b/index.html @@ -1174,7 +1174,7 @@ X-Google-Original-From: Somebody <somebody+extra@example.org>

The error ‘Handshake failed SSL handshake terminated … SSLV3_ALERT_HANDSHAKE_FAILURE … HANDSHAKE_FAILURE_ON_CLIENT_HELLO’ can be caused by this Android 7.0 bug. This can unfortunately not be fixed by FairEmail.

The error ‘Handshake failed … UNSUPPORTED_PROTOCOL or TLSV1_ALERT_PROTOCOL_VERSION or SSLV3_ALERT_HANDSHAKE_FAILURE …’ might be caused by enabling hardening connections or Bouncy Castle in the connection settings tab page, or by Android not supporting older protocols anymore, like SSLv3 and TLSv1.

The error ‘javax.net.ssl.SSLHandshakeException: Read error: … CERT_LENGTH_MISMATCH’ means that there is something wrong with the email server setup. Try to switch to port 993 (IMAP) or 465 (SMTP) with SSL/TLS.

-

Android 8 Oreo and later do not support SSLv3 anymore. There is no way to workaround lacking RC4 and SSLv3 support because it has completely been removed from Android (which should say something).

+

Android 8 Oreo and later do not support SSLv3 anymore. There is no way to workaround lacking RC4 and SSLv3 support because it has completely been removed from Android (which should say something). Since version 1.2121 the Bouncy Castle secure socket provider (JSSE) is bundled. Enabling this socket provider in the connection-settings tab and enabling ‘Allow insecure connections’ in the account/identity settings might solve this problem.

The error ‘javax.net.ssl.SSLHandshakeException: Read error: … TLSV1_ALERT_INTERNAL_ERROR’ means that Android and the email server share no common protocol versions and/or common ciphers.

Please see here for an overview of supported protocols and cipher suites by Android version.

You can use this website or this website to check for SSL/TLS problems of email servers.