diff --git a/FAQ.md b/FAQ.md index 7fd1bfb531..8eb70aa00f 100644 --- a/FAQ.md +++ b/FAQ.md @@ -2095,6 +2095,9 @@ The error '*Handshake failed ... UNSUPPORTED_PROTOCOL or TLSV1_ALERT_PROTOCOL_VE might be caused by enabling **hardening connections** or **Bouncy Castle** in the connection settings tab page, or by Android not supporting older protocols anymore, like SSLv3 and TLSv1. +The error '*javax.net.ssl.SSLHandshakeException: Read error: ... CERT_LENGTH_MISMATCH*' means that there is something wrong with the email server setup. +Try to switch to port 993 (IMAP) or 465 (SMTP) with SSL/TLS. + Android 8 Oreo and later [do not support](https://developer.android.com/about/versions/oreo/android-8.0-changes#security-all) SSLv3 anymore. There is no way to workaround lacking RC4 and SSLv3 support because it has completely been removed from Android (which should say something). diff --git a/index.html b/index.html index a4251cff78..afb1b02235 100644 --- a/index.html +++ b/index.html @@ -1173,6 +1173,7 @@ X-Google-Original-From: Somebody <somebody+extra@example.org>
The error ‘Handshake failed … HANDSHAKE_FAILURE_ON_CLIENT_HELLO …’ might be caused by the provider still using RC4, which isn’t supported since Android 7 anymore.
The error ‘Handshake failed SSL handshake terminated … SSLV3_ALERT_HANDSHAKE_FAILURE … HANDSHAKE_FAILURE_ON_CLIENT_HELLO’ can be caused by this Android 7.0 bug. This can unfortunately not be fixed by FairEmail.
The error ‘Handshake failed … UNSUPPORTED_PROTOCOL or TLSV1_ALERT_PROTOCOL_VERSION or SSLV3_ALERT_HANDSHAKE_FAILURE …’ might be caused by enabling hardening connections or Bouncy Castle in the connection settings tab page, or by Android not supporting older protocols anymore, like SSLv3 and TLSv1.
+The error ‘javax.net.ssl.SSLHandshakeException: Read error: … CERT_LENGTH_MISMATCH’ means that there is something wrong with the email server setup. Try to switch to port 993 (IMAP) or 465 (SMTP) with SSL/TLS.
Android 8 Oreo and later do not support SSLv3 anymore. There is no way to workaround lacking RC4 and SSLv3 support because it has completely been removed from Android (which should say something).
Please see here for an overview of supported protocols and cipher suites by Android version.
You can use this website or this website to check for SSL/TLS problems of email servers.