From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/87772 Path: news.gmane.org!.POSTED!not-for-mail From: Eric Abrahamsen Newsgroups: gmane.emacs.gnus.general Subject: Re: new (?) version of the old nnml problem Date: Fri, 20 Oct 2017 09:11:33 -0700 Message-ID: <87wp3piytm.fsf@ericabrahamsen.net> References: <86wp3p28u5.fsf@zoho.com> <86shed284o.fsf@zoho.com> <86o9p127p4.fsf@zoho.com> <8760b9kewf.fsf@ericabrahamsen.net> <86376d24n7.fsf@zoho.com> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1508516186 32283 195.159.176.226 (20 Oct 2017 16:16:26 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Fri, 20 Oct 2017 16:16:26 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.90 (gnu/linux) To: ding@gnus.org Original-X-From: ding-owner+m35986@lists.math.uh.edu Fri Oct 20 18:16:21 2017 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from mxfilter-048034.atla03.us.yomura.com ([107.189.48.34]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1e5Zxx-00068A-12 for ding-account@gmane.org; Fri, 20 Oct 2017 18:16:09 +0200 X-Yomura-MXScrub: 1.0 Original-Received: from lists1.math.uh.edu (unknown [129.7.128.208]) by mxfilter-048034.atla03.us.yomura.com (Halon) with ESMTPS id f2aa3ef4-b5b1-11e7-8a16-b499baa2b07a; Fri, 20 Oct 2017 16:15:54 +0000 (UTC) Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by lists1.math.uh.edu with smtp (Exim 4.87) (envelope-from ) id 1e5ZxZ-0002hI-Gx; Fri, 20 Oct 2017 11:15:45 -0500 Original-Received: from mx1.math.uh.edu ([129.7.128.32]) by lists1.math.uh.edu with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.87) (envelope-from ) id 1e5ZxX-0002ga-2M for ding@lists.math.uh.edu; Fri, 20 Oct 2017 11:15:43 -0500 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx1.math.uh.edu with esmtps (TLSv1.2:DHE-RSA-AES128-SHA:128) (Exim 4.87) (envelope-from ) id 1e5ZxV-0001Bm-G7 for ding@lists.math.uh.edu; Fri, 20 Oct 2017 11:15:42 -0500 Original-Received: from [195.159.176.226] (helo=blaine.gmane.org) by quimby.gnus.org with esmtps (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1e5ZxF-0007rW-CT for ding@gnus.org; Fri, 20 Oct 2017 18:15:27 +0200 Original-Received: from list by blaine.gmane.org with local (Exim 4.84_2) (envelope-from ) id 1e5Zwt-0006ZR-Fm for ding@gnus.org; Fri, 20 Oct 2017 18:15:03 +0200 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 48 Original-X-Complaints-To: usenet@blaine.gmane.org Cancel-Lock: sha1:2rRaKoUSh356zlSZsDYwMKkDQY0= List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:87772 Archived-At: Emanuel Berg writes: > Eric Abrahamsen wrote: > >> Maybe confirm that POP access works from the >> command line first? >> >> https://unix.stackexchange.com/questions/201818/checking-pop-mail-account-using-terminal > > Error according to socat, works with openssl. > > test-zoho () { > local server=pop.zoho.com > local port=995 > socat - OPENSSL:${server}:${port} > echo "socat done" > openssl s_client -quiet -connect ${server}:${port} > echo "openssl done" > } > > $ test-zoho > > 2017/10/20 17:54:09 socat[29967] E SSL_connect(): error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed > socat done > depth=2 C = US, O = "thawte, Inc.", OU = Certification Services Division, OU = "(c) 2006 thawte, Inc. - For authorized use only", CN = thawte Primary Root CA > verify return:1 > depth=1 C = US, O = "thawte, Inc.", OU = Domain Validated SSL, CN = thawte DV SSL CA - G2 > verify return:1 > depth=0 CN = *.zoho.com > verify return:1 > +OK POP3 mx.zohomail.com v1.0 server ready <10427.1508514850321@mx.zohomail.com> > user XYZ > +OK > pass ABC > +OK > quit > +OK mx.zohomail.com Service closing transmission channel > openssl done Unfortunately I don't know too much about tls, and will be of limited help here, but my guess is there's something slightly wrong with the pop.zoho.com certificate, something that openssl is letting slide, but socat and gnutls aren't happy about. I really don't know much about these issues, though, so hopefully someone else will jump in... Eric