[GERONIMO-6792] Fix hard-coded TLSv1 version in MailConnection.java for Java Mail 1.6

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Resolved
• Fix Version/s: Javamail_1.6_1.0.1
• Component/s: mail
• Security Level: public (Regular issues)
• Patch Info: Patch Available
• Flags: Patch
• Assignee: Francois Papon
• Reporter: Richard Zowalla
• Created: 02/Dec/20 11:52
• Updated: 31/Aug/21 14:51
• Resolved: 30/Aug/21 22:10

Description

Hi,

I encountered some issues when using Geronimo Java Mail 1.6 (1.0.0) bundled with TomEE 8.0.5. The related thread [1] can be found on the [e-mail] Mailing-List.

In short: 

• Our mail server does only support TLS 1.2 or TLS 1.3
• Geronimo Java Mail 1.6 in version 1.0.0 has TLS 1.0 hard-coded in the source and does not use the default protocols or the specified ones via mail.smtp.ssl.protocols for a TLS connection.

I have attached a patch created via SVN DIFF. 

[1] https://www.mail-archive.com/[e-mail]/msg17544.html

Issue Links

• links to: GitHub Pull Request #2