From mboxrd@z Thu Jan 1 00:00:00 1970 MIME-Version: 1.0 Date: Thu, 30 Jul 2015 15:49:45 +0200 Message-ID: From: Ingo Krabbe To: 9fans@9fans.net Content-Type: multipart/alternative; boundary=94eb2c07dd3ee390fc051c17f99e Subject: [9fans] Problem with imaps/imap.gmail.com Topicbox-Message-UUID: 64c6247e-ead9-11e9-9d60-3106f5b1d025 --94eb2c07dd3ee390fc051c17f99e Content-Type: text/plain; charset=UTF-8 Hi, I'm using plan9 legacy and I have a problem with the tls certificate or with the handshake when I try to connect to the gmail.com account. It used to work for some time now. Today something went wrong with the imaps connection. I can't remember what, but there was some output on the console. Now, when I try to reconnect to the gmail box with echo -n 'open /imaps/imap.gmail.com/NAME/INBOX gmail' > /mail/fs/ctl echo: write error: imap.gmail.com/imaps:tlsClient: tls: local invalid x509/rsa certificate I had a similar error a few weeks ago but eventually it went away. Does anyone know how to solve this? regards, ingo --94eb2c07dd3ee390fc051c17f99e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,

I'm using plan9 legacy and I ha= ve a problem with the tls certificate or with the handshake when I try to c= onnect to the gmail.com account. It used t= o work for some time now. Today something went wrong with the imaps connect= ion. I can't remember what, but there was some output on the console.
Now, when I try to reconnect to the gmail box with

<= /div>
echo -n 'open /imaps/imap.gmail.com/NAME/INBOX gmail' > /mail/fs/ctl
<= div>echo: write error: im= ap.gmail.com/imaps:tlsClient: tls: local invalid x509/rsa certificate

I had a similar error a few weeks ago but eve= ntually it went away. Does anyone know how to solve this?

regards, ingo

--94eb2c07dd3ee390fc051c17f99e-- From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <97c310081ca37079e14160e88bf07d5d@felloff.net> Date: Thu, 30 Jul 2015 19:48:57 +0200 From: cinap_lenrek@felloff.net To: 9fans@9fans.net In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit Subject: Re: [9fans] Problem with imaps/imap.gmail.com Topicbox-Message-UUID: 64cb8752-ead9-11e9-9d60-3106f5b1d025 that sounds like X509toRSApub() failing to parse the certificate. can you reproduce it with tlsclient? term% tlsclient tcp!imap.gmail.com!imaps * OK Gimap ready for requests from 89.186.156.12 g20mb266178022wjn -- cinap From mboxrd@z Thu Jan 1 00:00:00 1970 MIME-Version: 1.0 In-Reply-To: References: Date: Thu, 30 Jul 2015 22:19:21 +0200 Message-ID: From: David du Colombier <0intro@gmail.com> To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net> Content-Type: text/plain; charset=UTF-8 Subject: Re: [9fans] Problem with imaps/imap.gmail.com Topicbox-Message-UUID: 64cff5bc-ead9-11e9-9d60-3106f5b1d025 > echo -n 'open /imaps/imap.gmail.com/NAME/INBOX gmail' > /mail/fs/ctl > echo: write error: imap.gmail.com/imaps:tlsClient: tls: local invalid > x509/rsa certificate It works for me: % tlsclient tcp!imap.gmail.com!imaps * OK Gimap ready for requests from 88.164.189.37 z20mb397773409wjy I notice the certificate is signed with SHA-256. Maybe you're running an older release of 9legacy. Please apply this patch and give a try: http://9legacy.org/9legacy/patch/libsec-x509-sha256rsa.diff -- David du Colombier From mboxrd@z Thu Jan 1 00:00:00 1970 MIME-Version: 1.0 In-Reply-To: References: Date: Fri, 31 Jul 2015 02:07:38 +0200 Message-ID: From: Ingo Krabbe To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net> Content-Type: multipart/alternative; boundary=001a114c7192994ddb051c209bbc Subject: Re: [9fans] Problem with imaps/imap.gmail.com Topicbox-Message-UUID: 64d3dda8-ead9-11e9-9d60-3106f5b1d025 --001a114c7192994ddb051c209bbc Content-Type: text/plain; charset=UTF-8 Great, after patching libsec and reinstall of tlsclient and upas both command work with gmail. Maybe I should run a system update 2015-07-30 22:19 GMT+02:00 David du Colombier <0intro@gmail.com>: > > echo -n 'open /imaps/imap.gmail.com/NAME/INBOX gmail' > /mail/fs/ctl > > echo: write error: imap.gmail.com/imaps:tlsClient: tls: local invalid > > x509/rsa certificate > > It works for me: > > % tlsclient tcp!imap.gmail.com!imaps > * OK Gimap ready for requests from 88.164.189.37 z20mb397773409wjy > > I notice the certificate is signed with SHA-256. > Maybe you're running an older release of 9legacy. > > Please apply this patch and give a try: > > http://9legacy.org/9legacy/patch/libsec-x509-sha256rsa.diff > > -- > David du Colombier > > --001a114c7192994ddb051c209bbc Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Great, after patching libsec and reinstall of tlsclient an= d upas both command work with gmail.
Maybe I should run a system update=


2015-07-30 22:19 GMT+02:00 David du Colombier &= lt;0intro@gmail.com>:
> echo= -n 'open /imaps/imap.gmail.com/NAME/INBOX gmail' > /= mail/fs/ctl
> echo: write error: imap.gmail.com/imaps:tlsClient: tls= : local invalid
> x509/rsa certificate

It works for me:

% tlsclient tcp!imap.gmail.com!imaps
* OK Gimap ready for requests from 88.164.189.37 z20mb397773409wjy

I notice the certificate is signed with SHA-256.
Maybe you're running an older release of 9legacy.

Please apply this patch and give a try:

http://9legacy.org/9legacy/patch/libsec-x= 509-sha256rsa.diff

--
David du Colombier


--001a114c7192994ddb051c209bbc--