smtpmail and gmx

smtpmail and gmx

[Uwe Brauer]

Hi

For gmail the following setting works (which I also use in 
thunderbird)
(setq smtpmail-auth-credentials '(("smtp.gmail.com" 587 "user" 
nil))) 


However when I set  
 
      (setq smtpmail-auth-credentials '(("mail.gmx.de" 587 "user" 
      nil))) 

I cannot sent the mail, I am not even asked the password. The 
server and the port are  correct (I use this setting successfully 
in thunderbird)


Anybody has an idea?

Uwe Brauer 

Re: smtpmail and gmx

[Uwe Brauer]

[-- Attachment #1: Type: text/plain, Size: 828 bytes --]

>>> "Uwe" == Uwe Brauer <oub@mat.ucm.es> writes:

> Hi

> For gmail the following setting works (which I also use in
> thunderbird)
> (setq smtpmail-auth-credentials '(("smtp.gmail.com" 587 "user" nil))) 


> However when I set  

>      (setq smtpmail-auth-credentials '(("mail.gmx.de" 587 "user" nil))) 

I tried also 

(setq smtpmail-auth-credentials '(("mail.gmx.de" 587 "user" nil)))

Which works with 

gnutls-cli --insecure -p 587 smtp.gmx.de
Processed 0 CA certificate(s).
Resolving 'smtp.gmx.de'...
Connecting to '212.227.17.190:587'...
|<1>| Received record packet of unknown type 50
*** Fatal error: An unexpected TLS packet was received.
*** Handshake has failed
GnuTLS error: An unexpected TLS packet was received.


That is odd, why is thunderbird able to connect but not gnutls-cli?

[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 5025 bytes --]

Re: smtpmail and gmx

[Uwe Brauer]

>> Hi

>> For gmail the following setting works (which I also use in
>> thunderbird)
>> (setq smtpmail-auth-credentials '(("smtp.gmail.com" 587 "user" nil))) 

I tried the 456 port 

gnutls-cli --insecure -p 465 smtp.gmx.de     

That worked 

 Using curve: SECP256R1
 - Curve size: 256 bits
- Version: TLS1.2
- Key Exchange: ECDHE-RSA
- Server Signature: RSA-SHA256
- Cipher: AES-128-GCM
- MAC: AEAD
- Compression: NULL
- Options: safe renegotiation,
- Handshake was completed

But even after setting 

(setq smtpmail-auth-credentials '(("smtp.gmail.com" 456 "user" nil))) 

It still fails, I am not even asked the password

Re: smtpmail and gmx

[Adam Sjøgren]

Uwe writes:

> gnutls-cli --insecure -p 465 smtp.gmx.de     

Here you are trying smtp.gmx.de.

> (setq smtpmail-auth-credentials '(("smtp.gmail.com" 456 "user" nil))) 

And now you are setting smtp.gmail.com.

Which is it?


  Best regards,

    Adam

-- 
 "Tom Cruise came into my work today."                        Adam Sjøgren
 "Who is Tom Cruise?"                                    asjo@koldfront.dk

Re: smtpmail and gmx

[Uwe Brauer]

[-- Attachment #1: Type: text/plain, Size: 625 bytes --]

>>> "Adam" == Adam Sjøgren <asjo@koldfront.dk> writes:

> Uwe writes:
>> gnutls-cli --insecure -p 465 smtp.gmx.de     

> Here you are trying smtp.gmx.de.

>> (setq smtpmail-auth-credentials '(("smtp.gmail.com" 456 "user" nil))) 

> And now you are setting smtp.gmail.com.

Oops, according to the documentation it should be mail.gmx.de
in thunderbird port 587 works, but 
gnutls-cli --insecure -p 587 mail.gmx.de

Does not work while 

gnutls-cli --insecure -p 465 mail.gmx.de

Works, 

But       (setq smtpmail-auth-credentials '(("mail.gmx.de" 465 "user"
nil)))

Does not work.

I am desperate 

[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 5025 bytes --]

Re: smtpmail and gmx

[Jens Lechtenboerger]

On 2018-12-11, at 17:02, Uwe Brauer wrote:

> Oops, according to the documentation it should be mail.gmx.de
> in thunderbird port 587 works, but 
> gnutls-cli --insecure -p 587 mail.gmx.de
>
> Does not work while 
>
> gnutls-cli --insecure -p 465 mail.gmx.de
>
> Works, 
>
> But       (setq smtpmail-auth-credentials '(("mail.gmx.de" 465 "user"
> nil)))
>
> Does not work.

Port 465 is SMTPS, while port 587 starts out with plaintext SMTP and
uses STARTTLS to switch to TLS.  You need to use --starttls with
gnutls-cli, probably also --crlf:
gnutls-cli --insecure --crlf --starttls -p 587 mail.gmx.de
Afterwards, you need to talk SMTP: Type “ehlo localhost”, then
“starttls”; press ctrl-d to enter TLS mode, which shows crypto
details.

I set smtpmail-smtp-server, smtpmail-smtp-service, and
smtpmail-smtp-user and use ~/.authinfo.gpg for passwords;
smtpmail-auth-credentials does not exist here.  Also, I have this
(where the first two entries are not used any longer):

;; smtpmail may use STARTTLS via gnutls, if supported.
;; Enforce it, give extra argument for certificate pinning.
(setq smtpmail-stream-type 'starttls
      starttls-extra-arguments '("--strict-tofu"))

Best wishes
Jens

Re: smtpmail and gmx

[Uwe Brauer]

[-- Attachment #1: Type: text/plain, Size: 1183 bytes --]


> On 2018-12-11, at 17:02, Uwe Brauer wrote:

> Port 465 is SMTPS, while port 587 starts out with plaintext SMTP and
> uses STARTTLS to switch to TLS.  You need to use --starttls with
> gnutls-cli, probably also --crlf:
> gnutls-cli --insecure --crlf --starttls -p 587 mail.gmx.de
> Afterwards, you need to talk SMTP: Type “ehlo localhost”, then
> “starttls”; press ctrl-d to enter TLS mode, which shows crypto
> details.

> I set smtpmail-smtp-server, smtpmail-smtp-service, and
> smtpmail-smtp-user and use ~/.authinfo.gpg for passwords;
> smtpmail-auth-credentials does not exist here.  Also, I have this
> (where the first two entries are not used any longer):

I first I thought I had it, but I was mistaken. I had to do three
things,



    1. use a modern smtpmail and a modern feedmail version.

    2. Actualize my authinfo file and

    3. Use the following setting:

      (setq smtpmail-stream-type 'starttls
       starttls-extra-arguments '("--strict-tofu"))
      (setq smtpmail-smtp-user  "brauer@gmx.de")
      (setq smtpmail-smtp-server "mail.gmx.de")
      (setq smtpmail-smtp-service 587)

Now it seems to work, thanks!

[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 4393 bytes --]

Re: smtpmail and gmx

[Uwe Brauer]

[-- Attachment #1: Type: text/plain, Size: 644 bytes --]


> On 2018-12-11, at 17:02, Uwe Brauer wrote:

> Port 465 is SMTPS, while port 587 starts out with plaintext SMTP and
> uses STARTTLS to switch to TLS.  You need to use --starttls with
> gnutls-cli, probably also --crlf:
> gnutls-cli --insecure --crlf --starttls -p 587 mail.gmx.de
> Afterwards, you need to talk SMTP: Type “ehlo localhost”, then
> “starttls”; press ctrl-d to enter TLS mode, which shows crypto
> details.

> I set smtpmail-smtp-server, smtpmail-smtp-service, and
> smtpmail-smtp-user and use ~/.authinfo.gpg for passwords;

Do you really gpg your authinfo file? Where and how do you store its password?

[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 5025 bytes --]

Re: smtpmail and gmx

[Eric S Fraga]

On Tuesday, 11 Dec 2018 at 23:28, Uwe Brauer wrote:
> Do you really gpg your authinfo file? Where and how do you store its
> password?

I gpg my authinfo file and emacs prompts for the gpg password when
trying to open it (as it does for trying to open any .gpg file).  You
may need to (require 'epa)


-- 
Eric S Fraga via Emacs 27.0.50 & org 9.1.14 on Debian buster/sid

Re: smtpmail and gmx

[Adam Sjøgren]

Uwe writes:

> Do you really gpg your authinfo file? Where and how do you store its
> password?

I know I do.

I store the password in my head, and get prompted for it when I start
Gnus.

Works quite smoothly, and I don't have to store my passwords in clean
text.


  Best regards,

    Adam

-- 
 "Oh Lord won't you bless this night"                         Adam Sjøgren
                                                         asjo@koldfront.dk

Re: smtpmail and gmx

[Andreas Schwab]

On Dez 11 2018, Uwe Brauer <oub@mat.ucm.es> wrote:

> gnutls-cli --insecure -p 587 mail.gmx.de

This needs an unencrypted connection, then STARTTLS.

> gnutls-cli --insecure -p 465 mail.gmx.de

This is encrypted from the start, thus you need to set
smtpmail-stream-type to 'ssl.

Andreas.

-- 
Andreas Schwab, schwab@linux-m68k.org
GPG Key fingerprint = 7578 EB47 D4E5 4D69 2510  2552 DF73 E780 A9DA AEC1
"And now for something completely different."

[feedmail] (was: smtpmail and gmx)

[Uwe Brauer]

[-- Attachment #1: Type: text/plain, Size: 1620 bytes --]

>>> "Andreas" == Andreas Schwab <schwab@linux-m68k.org> writes:

> On Dez 11 2018, Uwe Brauer <oub@mat.ucm.es> wrote:
>> gnutls-cli --insecure -p 587 mail.gmx.de

> This needs an unencrypted connection, then STARTTLS.

>> gnutls-cli --insecure -p 465 mail.gmx.de

> This is encrypted from the start, thus you need to set
> smtpmail-stream-type to 'ssl.

This did not work, however I found out that I am using a quite old
smtpmail.el (I explain below way)
Once I switched to the official one, the following setting worked



      (setq smtpmail-stream-type 'starttls)
      (setq smtpmail-auth-credentials '(("mail.gmx.de" 587 "user" nil)))

However the problem is that I am used very much to feedmail, now
feedmail with the actual smtpmail gives the following error:


,----
| 
| Debugger entered--Lisp error: (error "FQM: Sending...failed")
|   signal(error ("FQM: Sending...failed"))
|   error("FQM: Sending...failed")
|   #f(compiled-function () #<bytecode 0x15e2d05>)()
|   feedmail-send-it-immediately()
|   feedmail-send-it-immediately-wrapper()
|   feedmail-message-action-send()
|   feedmail-send-it()
|   message-multi-smtp-send-mail()
|   gnus-agent-send-mail()
|   message-send-mail(nil)
|   message-send-via-mail(nil)
|   message-send(nil)
|   message-send-and-exit(nil)
|   my-send-with-or-without-link(nil)
|   funcall-interactively(my-send-with-or-without-link nil)
|   call-interactively(my-send-with-or-without-link nil nil)
|   command-execute(my-send-with-or-without-link)
`----

And I have no idea how to debug this, any idea? Anybody using feedmail?

[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 5025 bytes --]

Re: smtpmail and gmx

[Michael Albinus]

Uwe Brauer <oub@mat.ucm.es> writes:

Hi Uwe,

> Oops, according to the documentation it should be mail.gmx.de
> in thunderbird port 587 works, but 
> gnutls-cli --insecure -p 587 mail.gmx.de
>
> Does not work while 
>
> gnutls-cli --insecure -p 465 mail.gmx.de
>
> Works, 
>
> But       (setq smtpmail-auth-credentials '(("mail.gmx.de" 465 "user"
> nil)))
>
> Does not work.
>
> I am desperate 

For years, I'm using

--8<---------------cut here---------------start------------->8---
(setq smtpmail-default-smtp-server "mail.gmx.net"
      smtpmail-local-domain "gmx.de"
      smtpmail-stream-type 'starttls
      user-mail-address "michael.albinus@gmx.de")
--8<---------------cut here---------------end--------------->8---

Best regards, Michael.

Re: smtpmail and gmx

[황병희]

> (setq smtpmail-default-smtp-server "mail.gmx.net"
>       smtpmail-local-domain "gmx.de"
>       smtpmail-stream-type 'starttls
>       user-mail-address "michael.albinus@gmx.de")

Wow that's good to know, because i didn't know that fact there does
exist `smtpmail-stream-type', thanks!!!

Sincerely, Byung-Hee.

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: smtpmail and gmx

[Robert Pluim]

[-- Attachment #1: Type: text/plain, Size: 715 bytes --]

Uwe Brauer <oub@mat.ucm.es> writes:

>>>> "Uwe" == Uwe Brauer <oub@mat.ucm.es> writes:
>
>> Hi
>
>> For gmail the following setting works (which I also use in
>> thunderbird)
>> (setq smtpmail-auth-credentials '(("smtp.gmail.com" 587 "user" nil))) 
>
>
>> However when I set  
>
>>      (setq smtpmail-auth-credentials '(("mail.gmx.de" 587 "user" nil))) 
>
> I tried also 
>
> (setq smtpmail-auth-credentials '(("mail.gmx.de" 587 "user" nil)))
>
> Which works with 
>
> gnutls-cli --insecure -p 587 smtp.gmx.de

mail.gmx.de and smtp.gmx.de are not equal.

In current versions of Emacs smtpmail-auth-credentials no longer
exists anyway, itʼs all been replaced with auth-source.

Robert

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: smtpmail and gmx

[Uwe Brauer]

[-- Attachment #1: Type: text/plain, Size: 1557 bytes --]


> Uwe Brauer <oub@mat.ucm.es> writes:

> mail.gmx.de and smtp.gmx.de are not equal.

Right, I just found out.
> In current versions of Emacs smtpmail-auth-credentials no longer
> exists anyway, itʼs all been replaced with auth-source.

Thanks, any pointer?

The best error message I found is this
530-5.5.1 Authentication Required. Learn more at
,----
| 
| Send via smtpmail failed.  Probable SMTP protocol error.
| Look for details below or in the *Messages* buffer.
| 
| SMTP Trace from *trace of SMTP session to smtp.gmail.com*
| ---------------
| 
| 220 smtp.gmail.com ESMTP k23sm126126wmj.32 - gsmtp
| 
| Process SMTP killed
| EHLO Utnapischtim
| 250-smtp.gmail.com at your service, [147.96.12.99]
| 250-SIZE 35882577
| 250-8BITMIME
| 250-STARTTLS
| 250-ENHANCEDSTATUSCODES
| 250-PIPELINING
| 250-CHUNKING
| 250 SMTPUTF8
| STARTTLS
| 220 2.0.0 Ready to start TLS
| EHLO Utnapischtim
| 250-smtp.gmail.com at your service, [147.96.12.99]
| 250-SIZE 35882577
| 250-8BITMIME
| 250-AUTH LOGIN PLAIN XOAUTH2 PLAIN-CLIENTTOKEN OAUTHBEARER XOAUTH
| 250-ENHANCEDSTATUSCODES
| 250-PIPELINING
| 250-CHUNKING
| 250 SMTPUTF8
| MAIL FROM:<user@gmx.de> SIZE=394
| 530-5.5.1 Authentication Required. Learn more at
| 530 5.5.1  https://support.google.com/mail/?p=WantAuthError k23sm126126wmj.32 - gsmtp
| QUIT
| 221 2.0.0 closing connection k23sm126126wmj.32 - gsmtp
| *** Fatal error: The TLS connection was non-properly terminated.
| *** Server has terminated the connection abnormally.
| 
| > Robert
| 
`----

[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 5025 bytes --]