Re: [Evolution] problems with imap ssl

[Jeffrey Stedfast <fejj ximian com>]

right... btw- STARTTLS only supports TLSv1 while sslwrap uses SSLv2 or
SSLv3 - hence the flags argument to the stream_ssl_new function. My
guess is that he has configured his server to use the wrong SSL/TLS
protocol(s).

there was a bug about this a long while back where evo would try to use
SSLv2 or SSLv3 or something with STARTTLS (or else TLSv1 with sslwrap, I
forget which) - either way, the problem was that evo was allowing nss to
try and use an inappropriate SSL version. Now that problem is fixed, but
likely some servers are incorrectly configured to try and sue the wrong
SSL versions.


Jeff

On Tue, 2003-07-22 at 12:21, Not Zed wrote:
> This discussion is all very well, but it doesn't really address the
> original problem ...
>
> Its obviously attempting to do starttls, but it's failing for some other
> reason.  Even if we did try another port/etc, we'd still fail at that
> point, since the server said starttls should work.  i.e. we're not even
> dropping back to plain tcp either.
>
>
> On Wed, 2003-07-23 at 04:45, Jeffrey Stedfast wrote:
> > David Woodhouse wrote:
> > > On Tue, 2003-07-22 at 15:06, Jeffrey Stedfast wrote:
> > >   
> > > > right, hence the way it is done now.
> > > >     
> > > Which is sane enough -- it's just that the nomenclature is currently
> > > somewhat misleading. 
> >
> > *nod*
> >
> > > There _may_ be people who want '993 or 143+TLS or 143 plain' but to be
> > > honest I doubt they'll be unable to manage with one of the current
> > > options '993 or 143+TLS' and '143+TLS or 143 plain'.
> >
> > yea, I think they can definetely manage - whether we should change the
> > menus to be more clear or something is up to Anna (and how to word
> > it). I wonder what other clients like Mozilla do... maybe I'll have to
> > fire up ethereal one of these days.
> >
> > Jeff
>
> _______________________________________________
> evolution maillist  -  evolution lists ximian com
> http://lists.ximian.com/mailman/listinfo/evolution
-- 
Jeffrey Stedfast
Evolution Hacker - Ximian, Inc.
fejj ximian com  - www.ximian.com