Bug#338445: balsa can't connect to uw-imapd

[Oliver-Mark Cordes]

On Sat, 12 Nov 2005, Pawel Salek wrote:

> [...]
> Can you please:
> 1. quote the exact message displayed by balsa.
>

Scnanning of myhost:993 failed:
Cannot connect to the server: SSL negotiation failed


> 2. if you connect to the SSL-ized imap service, please run:
> openssl s_client -crlf -connect xxx.xxx.xxx.xxx:imaps
> and type then ". LOGOUT", and report any errors that this tool reports.
>

openssl s_client -crlf -connect aibn38:imaps
CONNECTED(00000003)
depth=0 /C=DE/ST=Nordrhein-Westfalen/L=Bonn/O=Universitaet 
Bonn/OU=Sternwarte/CN=aibn38.astro.uni-bonn.de/emailAddress=sysstw at astro.uni-bonn.de
verify error:num=18:self signed certificate
verify return:1
depth=0 /C=DE/ST=Nordrhein-Westfalen/L=Bonn/O=Universitaet 
Bonn/OU=Sternwarte/CN=aibn38.astro.uni-bonn.de/emailAddress=sysstw at astro.uni-bonn.de
verify return:1
---
Certificate chain
  0 s:/C=DE/ST=Nordrhein-Westfalen/L=Bonn/O=Universitaet 
Bonn/OU=Sternwarte/CN=aibn38.astro.uni-bonn.de/emailAddress=sysstw at astro.uni-bonn.de
    i:/C=DE/ST=Nordrhein-Westfalen/L=Bonn/O=Universitaet 
Bonn/OU=Sternwarte/CN=aibn38.astro.uni-bonn.de/emailAddress=sysstw at astro.uni-bonn.de
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=DE/ST=Nordrhein-Westfalen/L=Bonn/O=Universitaet 
Bonn/OU=Sternwarte/CN=aibn38.astro.uni-bonn.de/emailAddress=sysstw at astro.uni-bonn.de
issuer=/C=DE/ST=Nordrhein-Westfalen/L=Bonn/O=Universitaet 
Bonn/OU=Sternwarte/CN=aibn38.astro.uni-bonn.de/emailAddress=sysstw at astro.uni-bonn.de
---
No client certificate CA names sent
---
SSL handshake has read 1206 bytes and written 340 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
     Protocol  : TLSv1
     Cipher    : AES256-SHA
     Session-ID: 
08438B66BEC25901E0FBFB869E03715AA1A0B9E2638416F6A4E93572D52E8141 
Session-ID-ctx:
     Master-Key: 
9CC0570378A131A5500200F9C57E1563E6A586C886D5F5143C5D12BB74DF36E9EA27D3FA457111239758F321741AABBB
     Key-Arg   : None
     Start Time: 1131822412
     Timeout   : 300 (sec)
     Verify return code: 18 (self signed certificate)
---
* OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS AUTH=PLAIN AUTH=LOGIN] 
aibn38.astro.uni-bonn.de IMAP4rev1 2003.339 at Sat, 12 Nov 2005 20:06:49 
+0100 (CET)
. LOGOUT
* BYE aibn38.astro.uni-bonn.de IMAP4rev1 server terminating connection
. OK LOGOUT completed
read:errno=0


> My *first* impression is that your server certificates are set up incorrectly 
> but more information is needed to ascertain that.

This was also my first impression, because we are only able to use 
selfsigned certificates so far. But I used this connection with balsa now 
for serveral month without any problems and we do not change anything on 
the imaps-server.

BTW, imps with pine or thunderbird works without any problems, so I think 
this is a balsa related problem ... ;-)

 	Oliver

>
> Pawel
>

-- 
  (O>  (0-   _o)   -O)
  //\  //\    /\\  /\\
  V_/_ V_/_  _\_V _\_V

  Dr. Oliver-M. Cordes       E-Mail:   ocordes at astro.uni-bonn.de
  Sternwarte der             WWW-URL:  http://www.astro.uni-bonn.de/~ocordes/
  Universitaet Bonn          Phone:    (49) 228 / 73-5656
  Auf dem Huegel 71          Fax:      (49) 228 / 73-3672
  D - 53121 Bonn    Germany

  Private address: Witterschlickerstr. 22 , D - 53123 Bonn
  Private phone:   (49) 228 / 7482582