Node v12+ Requires TLS min v1

[niftylettuce]

We need to add the option minVersion: 'TLSv1' to

smtp-server/lib/tls-options.js

Line 64 in 14c2435

};

[niftylettuce]

Ref: https://stackoverflow.com/a/56319636

[andris9]

Could you test if it works and make a pull request for it?

[niftylettuce]

We also need to add secureOptions: crypto.constants.SSL_OP_NO_SSLv3

[andris9]

minVersion and secureOptions can not be used at the same time. Using minVersion seems like more reasonable option (as it is simpler). What for would be the SSL_OP_NO_SSLv3 option anyway, seems kind of cryptic?

[niftylettuce]

@andris9 here's the config I used: <https://github.com/forwardemail/free-email-forwarding/blob/master/index.js#L144-L151

{
  // ...
  minVersion: 'TLSv1',
  ciphers: tls.getCiphers().map(cipher => cipher.toUpperCase()).join(':'),
  secureOptions: crypto.constants.SSL_OP_NO_SSLv3 | crypto.constants.SSL_OP_NO_SSLv2
}

[niftylettuce]

Ref: #136
Ref: #122
Ref: #156