From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from tb-mx0.topicbox.com (localhost.local [127.0.0.1])
	by tb-mx0.topicbox.com (Postfix) with ESMTP id E5E1BC2BE75
	for <9fans@9fans.net>; Thu, 28 Nov 2019 13:07:14 -0500 (EST)
	(envelope-from kvik@a-b.xyz)
Received: from tb-mx0.topicbox.com (localhost [127.0.0.1])
    by tb-mx0.topicbox.com (Authentication Milter) with ESMTP
    id 03D9AAB5BCE;
    Thu, 28 Nov 2019 13:07:14 -0500
ARC-Seal: i=1; a=rsa-sha256; cv=none; d=topicbox.com; s=arcseal; t=
    1574964434; b=qefGEdOVQ5RWERepd9OQXWlWnnY08w97R9Ddb7/ym48chjrUlX
    3OHS1fhimY879AZ6OO25QsvuhRMkzyMLaAjB+gK14uPnveB1qKuSp1CSkijN3XvJ
    p6BqbQn39zP/ykEkCkmlBACqLeCJMR++r+mLKpdg4fRWW3OsUUeCW5NUw219Givz
    aVF9jGmT3SF9oqiVPvWRvZftNFRBUT6DQ+SPqxmkck2oNcmqCLzu3EcwF3OX/mSe
    RmkipBdnyKl/gbOSD7k7M//SQaLEPS1/U0XHTcIFODXWdrK+64fy0qwk+tkVW0WL
    FJx4oR0pghBtOrANvhf1twUqdmGD9um6PpiA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=
    topicbox.com; h=message-id:to:subject:date:from:in-reply-to
    :mime-version:content-type:content-transfer-encoding; s=arcseal;
    t=1574964434; bh=LdnBxOgqImRKAWca0Nvl7jqXujcXZZFnEv/Y7690vCM=; b=
    oB4v5Amq65DbwZQyJakevip7bqORCdA4nEaOXRJwoF4utB4rVgfd2uS7Yrkd4zm2
    6JRdvDePo1G6H47oJkBGbQT3c5ElOl+U/IeYwRJOfiDLkFFq9NM3LqSwdNcGDGhV
    FZe5wDkk1U3PVSyn4PVK1xDxXsV38zwFmVRfbidUkWTwfIy/mqBOwuoF5aBmh3xp
    1VRdMyqUovg00o2zN47nk3QsR3nM1Rbqzb/ml+8ej1UiS2tum/l2ktiRvb2Tb1hD
    /saw6xw/dAouFfYknaKOqMdlI3bszN6+95RjbOqbGgsMcK+7U8N7J2A3Ll27+Ee7
    ZPjzAbKUBtscMmxaMixc/g==
ARC-Authentication-Results: i=1; tb-mx0.topicbox.com; arc=none (no signatures found);
    dkim=none (no signatures found);
    dmarc=none policy.published-domain-policy=none
    policy.applied-disposition=none policy.evaluated-disposition=none
    (p=none,d=none,d.eval=none) policy.policy-from=p header.from=a-b.xyz;
    iprev=pass smtp.remote-ip=45.32.152.219 (yow.a-b.xyz);
    spf=pass smtp.mailfrom=kvik@a-b.xyz smtp.helo=yow.a-b.xyz;
    x-aligned-from=pass (Address match);
    x-ptr=pass smtp.helo=yow.a-b.xyz policy.ptr=yow.a-b.xyz;
    x-return-mx=pass header.domain=a-b.xyz policy.is_org=yes
    (MX Record found);
    x-return-mx=pass smtp.domain=a-b.xyz policy.is_org=yes
    (MX Record found);
    x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384
    smtp.bits=256/256;
    x-vs=clean score=70 state=0
Authentication-Results: tb-mx0.topicbox.com;
    arc=none (no signatures found);
    dkim=none (no signatures found);
    dmarc=none policy.published-domain-policy=none
      policy.applied-disposition=none policy.evaluated-disposition=none
      (p=none,d=none,d.eval=none) policy.policy-from=p header.from=a-b.xyz;
    iprev=pass smtp.remote-ip=45.32.152.219 (yow.a-b.xyz);
    spf=pass smtp.mailfrom=kvik@a-b.xyz smtp.helo=yow.a-b.xyz;
    x-aligned-from=pass (Address match);
    x-ptr=pass smtp.helo=yow.a-b.xyz policy.ptr=yow.a-b.xyz;
    x-return-mx=pass header.domain=a-b.xyz policy.is_org=yes
      (MX Record found);
    x-return-mx=pass smtp.domain=a-b.xyz policy.is_org=yes
      (MX Record found);
    x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384
      smtp.bits=256/256;
    x-vs=clean score=70 state=0
X-ME-VSCause: gggruggvucftvghtrhhoucdtuddrgedufedrudeijedguddtiecutefuodetggdotefrod
    ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp
    uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecufghrlhcuvffnffculd
    ejtddmnecujfgurhepkffvufffhfgjgggtgfesthejjedttddtvdenucfhrhhomhepkhhv
    ihhksegrqdgsrdighiiinecuffhomhgrihhnpehgmhgrihhlrdgtohhmnecukfhppeeghe
    drfedvrdduhedvrddvudelnecurfgrrhgrmhepihhnvghtpeeghedrfedvrdduhedvrddv
    udelpdhhvghlohephihofidrrgdqsgdrgiihiidpmhgrihhlfhhrohhmpeeokhhvihhkse
    grqdgsrdighiiiqeenucevlhhushhtvghrufhiiigvpedt
X-ME-VSCategory: clean
Received-SPF: pass
    (a-b.xyz: 45.32.152.219 is authorized to use 'kvik@a-b.xyz' in 'mfrom' identity (mechanism 'mx' matched))
    receiver=tb-mx0.topicbox.com;
    identity=mailfrom;
    envelope-from="kvik@a-b.xyz";
    helo=yow.a-b.xyz;
    client-ip=45.32.152.219
Received: from yow.a-b.xyz (yow.a-b.xyz [45.32.152.219])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by tb-mx0.topicbox.com (Postfix) with ESMTPS
	for <9fans@9fans.net>; Thu, 28 Nov 2019 13:07:14 -0500 (EST)
	(envelope-from kvik@a-b.xyz)
Received: 
	by yow.a-b.xyz (OpenSMTPD) with ESMTPSA id efe23bf1 (TLSv1.2:ECDHE-RSA-AES256-SHA:256:NO)
	for <9fans@9fans.net>;
	Thu, 28 Nov 2019 19:07:12 +0100 (CET)
Message-ID: <DAE64C805AFD6BFDD4AF8350960BE195@a-b.xyz>
To: 9fans@9fans.net
Subject: Re: [9fans] Gmail vs upas
Date: Thu, 28 Nov 2019 19:07:11 +0100
From: kvik@a-b.xyz
In-Reply-To: <CAGGHmKHHyO1vJXN9vjvW_XjaLf2mV58bo0t-ArfFbqBpZUgFWQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Topicbox-Policy-Reasoning: allow: sender is a member
Topicbox-Message-UUID: eac9602a-1209-11ea-9488-ba0228ccef3a

> unfortunately it doesn't look like anything is being logged

Turns out I misremembered where upas/fs logs the failure:

; upas/fs -f /imaps/imap.gmail.com/$gmail
upas/fs: opening /imaps/imap.gmail.com/$gmail: imap.gmail.com/imaps:cert for imap.gmail.com not recognized: sha256=3oXL6BEgeiAKLNpIZtBn0GdxDoMdiDRpuS8qX2xm8oM

> imap.gmail.com/imaps:tlsClient: tls: local invalid x509/rsa
certificate

Perhaps retry with a clean /sys/lib/tls/mail.