From 5d00935509d9d36d91aa835c105a6ee7c7700f06 Mon Sep 17 00:00:00 2001
From: Zhang Huangbin <zhb@iredmail.org>
Date: Sat, 13 Jun 2020 00:00:25 +0800
Subject: [PATCH] Sync iRedMail upgrade tutorial.

---
 en_US/upgrade/0-upgrade.iredmail.1.2.1-1.3.md | 26 +++++++++++++++++++
 html/upgrade.iredmail.1.2.1-1.3.html          | 19 ++++++++++++++
 2 files changed, 45 insertions(+)

diff --git a/en_US/upgrade/0-upgrade.iredmail.1.2.1-1.3.md b/en_US/upgrade/0-upgrade.iredmail.1.2.1-1.3.md
index 36cb6ba3..b2d77c66 100644
--- a/en_US/upgrade/0-upgrade.iredmail.1.2.1-1.3.md
+++ b/en_US/upgrade/0-upgrade.iredmail.1.2.1-1.3.md
@@ -45,6 +45,32 @@ References:
 
 - [Security updates 1.4.5 and 1.3.12 released](https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12)
 - [Updates 1.4.6 and 1.3.13 released](https://roundcube.net/news/2020/06/07/updates-1.4.6-and-1.3.13-released)
+
+### Fixed: can not manage mail filters with Roundcube on CentOS 7
+
+!!! attention
+
+    This is only application to CentOS 7.
+
+On CentOS 7, the Roundcube official plugin `managesieve` doesn't work with
+TLSv1.1 and TLSv1.2, so we have to re-enable TLSv1 in Dovecot, otherwise you
+can not manage mail filters with Roundcube.
+
+Open file `/etc/dovecot/dovecot.conf`, find the `ssl_protocols` parameter like
+below:
+
+```
+ssl_protocols = !SSLv2 !SSLv3 !TLSv1 !TLSv1.1
+```
+
+Remove `!TLSv1` and restart Dovecot service:
+
+```
+ssl_protocols = !SSLv2 !SSLv3 !TLSv1.1
+```
+
+Note: TLSv1 and TLSv1.2 are supported with this change.
+
 ### Fixed: inconsistent Fail2ban jail names
 
 !!! attention
diff --git a/html/upgrade.iredmail.1.2.1-1.3.html b/html/upgrade.iredmail.1.2.1-1.3.html
index 406e7894..5173acaf 100644
--- a/html/upgrade.iredmail.1.2.1-1.3.html
+++ b/html/upgrade.iredmail.1.2.1-1.3.html
@@ -23,6 +23,7 @@
 <li><a href="#general-all-backends-should-apply-these-changes">General (All backends should apply these changes)</a><ul>
 <li><a href="#update-etciredmail-release-with-new-iredmail-version-number">Update /etc/iredmail-release with new iRedMail version number</a></li>
 <li><a href="#upgrade-roundcube-webmail-to-the-latest-stable-release-146">Upgrade Roundcube webmail to the latest stable release (1.4.6)</a></li>
+<li><a href="#fixed-can-not-manage-mail-filters-with-roundcube-on-centos-7">Fixed: can not manage mail filters with Roundcube on CentOS 7</a></li>
 <li><a href="#fixed-inconsistent-fail2ban-jail-names">Fixed: inconsistent Fail2ban jail names</a></li>
 </ul>
 </li>
@@ -83,6 +84,24 @@ the latest 1.2 branch instead.</p>
 <li><a href="https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12">Security updates 1.4.5 and 1.3.12 released</a></li>
 <li><a href="https://roundcube.net/news/2020/06/07/updates-1.4.6-and-1.3.13-released">Updates 1.4.6 and 1.3.13 released</a></li>
 </ul>
+<h3 id="fixed-can-not-manage-mail-filters-with-roundcube-on-centos-7">Fixed: can not manage mail filters with Roundcube on CentOS 7</h3>
+<div class="admonition attention">
+<p class="admonition-title">Attention</p>
+<p>This is only application to CentOS 7.</p>
+</div>
+<p>On CentOS 7, the Roundcube official plugin <code>managesieve</code> doesn't work with
+TLSv1.1 and TLSv1.2, so we have to re-enable TLSv1 in Dovecot, otherwise you
+can not manage mail filters with Roundcube.</p>
+<p>Open file <code>/etc/dovecot/dovecot.conf</code>, find the <code>ssl_protocols</code> parameter like
+below:</p>
+<pre><code>ssl_protocols = !SSLv2 !SSLv3 !TLSv1 !TLSv1.1
+</code></pre>
+
+<p>Remove <code>!TLSv1</code> and restart Dovecot service:</p>
+<pre><code>ssl_protocols = !SSLv2 !SSLv3 !TLSv1.1
+</code></pre>
+
+<p>Note: TLSv1 and TLSv1.2 are supported with this change.</p>
 <h3 id="fixed-inconsistent-fail2ban-jail-names">Fixed: inconsistent Fail2ban jail names</h3>
 <div class="admonition attention">
 <p class="admonition-title">Attention</p>