sieve-manage & starttls

[ludo@gnu.org (Ludovic Courtès)]

Hello!

ludo@gnu.org (Ludovic Courtès) writes:

> $ gnutls-cli --starttls -p 2000 imap.example.com
> Resolving 'imap.example.com'...
>
> - Simple Client Mode:
>
> "IMPLEMENTATION" "dovecot"
> "SASL" ""
> "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify include envelope body relational regex subaddress copy"
> "STARTTLS"
> "RENAME"
> OK "mail server - Dovecot ready."
> STARTTLS
> OK "Begin TLS negotiation now."
> *** Starting TLS handshake
> - Ephemeral Diffie-Hellman parameters
>  - Using prime: 1024 bits
>  - Secret key: 1021 bits
>  - Peer's public key: 1023 bits
> - Certificate type: X.509
>  - Got a certificate list of 1 certificates.
>  - Certificate[0] info:
>   - subject `...’
> - The hostname in the certificate matches 'imap.example.com'.
> - Peer's certificate issuer is unknown
> - Peer's certificate is NOT trusted
> - Version: TLS1.0
> - Key Exchange: DHE-RSA
> - Cipher: AES-128-CBC
> - MAC: SHA1
> - Compression: NULL
> "IMPLEMENTATION" "dovecot"
> "SASL" "PLAIN"
> "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify include envelope body relational regex subaddress copy"
> "RENAME"
> OK "TLS negotiation successful."

I’ve tried ‘sieve-manage’ from Gnus HEAD.

One problem illustrated by the example above is that capabilities must
be re-parsed after STARTTLS authentication.  This is complicated by the
fact that ‘gnutls-cli’ emits TLS information upon successful handshake
(the lines that start with a hyphen above), which
‘sieve-manage-parse-capability-1’ should ignore.

I’ve tried to work on this without success so far, so I’d welcome help
or even patches.  :-)

Thanks,
Ludo’.