Re: [PATCH] sieve-manage: use auth-source

[ludo@gnu.org (Ludovic Courtès)]

Hello,

Julien Danjou <julien@danjou.info> writes:

> On Wed, Oct 13 2010, Ludovic Courtès wrote:

[...]

>> Connecting to that server on port 2000 shows this:
>>
>> Connected to imap.example.com.
>> Escape character is '^]'.
>> "IMPLEMENTATION" "dovecot"
>> "SASL" ""
>
> This is not valid. The server is saying there's no way to SASL method to
> authenticate with.

Ooh, it’s actually more subtle than this: the PLAIN authentication
method becomes available once a TLS session has been negotiated:

--8<---------------cut here---------------start------------->8---
$ gnutls-cli --starttls -p 2000 imap.example.com
Resolving 'imap.example.com'...

- Simple Client Mode:

"IMPLEMENTATION" "dovecot"
"SASL" ""
"SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify include envelope body relational regex subaddress copy"
"STARTTLS"
"RENAME"
OK "mail server - Dovecot ready."
STARTTLS
OK "Begin TLS negotiation now."
*** Starting TLS handshake
- Ephemeral Diffie-Hellman parameters
 - Using prime: 1024 bits
 - Secret key: 1021 bits
 - Peer's public key: 1023 bits
- Certificate type: X.509
 - Got a certificate list of 1 certificates.
 - Certificate[0] info:
  - subject `...’
- The hostname in the certificate matches 'imap.example.com'.
- Peer's certificate issuer is unknown
- Peer's certificate is NOT trusted
- Version: TLS1.0
- Key Exchange: DHE-RSA
- Cipher: AES-128-CBC
- MAC: SHA1
- Compression: NULL
"IMPLEMENTATION" "dovecot"
"SASL" "PLAIN"
"SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify include envelope body relational regex subaddress copy"
"RENAME"
OK "TLS negotiation successful."
--8<---------------cut here---------------end--------------->8---

Apparently ‘manage-sieve’ in Gnus git supports starttls, so I’ll give it
a try.

Thanks,
Ludo’.