[9fans] Problem with imaps/imap.gmail.com

[9fans] Problem with imaps/imap.gmail.com

[Ingo Krabbe]

[-- Attachment #1: Type: text/plain, Size: 645 bytes --]

Hi,

I'm using plan9 legacy and I have a problem with the tls certificate or
with the handshake when I try to connect to the gmail.com account. It used
to work for some time now. Today something went wrong with the imaps
connection. I can't remember what, but there was some output on the console.
Now, when I try to reconnect to the gmail box with

echo -n 'open /imaps/imap.gmail.com/NAME/INBOX gmail' > /mail/fs/ctl
echo: write error: imap.gmail.com/imaps:tlsClient: tls: local invalid
x509/rsa certificate

I had a similar error a few weeks ago but eventually it went away. Does
anyone know how to solve this?

regards, ingo

[-- Attachment #2: Type: text/html, Size: 942 bytes --]

Re: [9fans] Problem with imaps/imap.gmail.com

[cinap_lenrek]

that sounds like X509toRSApub() failing to parse the certificate.
can you reproduce it with tlsclient?

term% tlsclient tcp!imap.gmail.com!imaps
* OK Gimap ready for requests from 89.186.156.12 g20mb266178022wjn

--
cinap

Re: [9fans] Problem with imaps/imap.gmail.com

[David du Colombier]

> echo -n 'open /imaps/imap.gmail.com/NAME/INBOX gmail' > /mail/fs/ctl
> echo: write error: imap.gmail.com/imaps:tlsClient: tls: local invalid
> x509/rsa certificate

It works for me:

% tlsclient tcp!imap.gmail.com!imaps
* OK Gimap ready for requests from 88.164.189.37 z20mb397773409wjy

I notice the certificate is signed with SHA-256.
Maybe you're running an older release of 9legacy.

Please apply this patch and give a try:

http://9legacy.org/9legacy/patch/libsec-x509-sha256rsa.diff

--
David du Colombier

Re: [9fans] Problem with imaps/imap.gmail.com

[Ingo Krabbe]

[-- Attachment #1: Type: text/plain, Size: 774 bytes --]

Great, after patching libsec and reinstall of tlsclient and upas both
command work with gmail.
Maybe I should run a system update


2015-07-30 22:19 GMT+02:00 David du Colombier <0intro@gmail.com>:

> > echo -n 'open /imaps/imap.gmail.com/NAME/INBOX gmail' > /mail/fs/ctl
> > echo: write error: imap.gmail.com/imaps:tlsClient: tls: local invalid
> > x509/rsa certificate
>
> It works for me:
>
> % tlsclient tcp!imap.gmail.com!imaps
> * OK Gimap ready for requests from 88.164.189.37 z20mb397773409wjy
>
> I notice the certificate is signed with SHA-256.
> Maybe you're running an older release of 9legacy.
>
> Please apply this patch and give a try:
>
> http://9legacy.org/9legacy/patch/libsec-x509-sha256rsa.diff
>
> --
> David du Colombier
>
>

[-- Attachment #2: Type: text/html, Size: 1568 bytes --]