Questions on ognus-0.07

Questions on ognus-0.07

[Peter Weiss, Sun Microsystems, Germany]

Hello,

    yesterday I managed to upgrade from Emacs21.1 gnus v5.9.0 to Oort Gnus
    v0.07.  A couple of questions/ problems arise:

    o Opening my old nnmbox file reveals an error:

        Reading active file from emsend via nnmbox...
        Opening nnmbox server on emsend...done
        nnmbox-record-active-article: Article Sun-MCC:1 already exists!
        Mark set
        
      the relevant line in the nnmbox file looks like

        Lines: 23
        Xref: diabolo.federation.Germany.Sun.COM Sun-MCC:1
        X-Gnus-Newsgroup: Sun-MCC:1   Thu Apr  6 10:36:33 2000

      BTW: How are messages delimted in a nnmbox file? It seems a bit
      corrupted now cause messages aren't split correctly, maybe I need to
      fix this manually.

    o When starting Gnus there a bunch of nnfolder+archive that are
      empty. They can be deleted by C-k but allways reappear on every
      startup.

    o Imap Access over SSL:

      Is there a way to retrieve an imap box with client X.509
      authentification over a local ssl connection tunneled through https?

      I've tried the following:

        (nnimap "Class"
                (nnimap-address "localhost")
                (nnimap-server-port 9993)
                (nnimap-stream ssl))

      But I only get the error message:

      Reading active file from Class via nnimap...
      Opening nnimap server on Class...
      Denied server
      Opening nnimap server on Class...failed

      According to 

        http://mail.gnu.org/pipermail/emacs-devel/2002-February/005386.html

      that google retrieved I guess this is planned for Emacs21.3 using
      GnuTLS lib. So chances are bad?

    o nnvirtual Group:

      I made a new nnvirtual group composed of two nnml groups. When getting
      new mail gnus thinks there are 48 new messages in the nnvirtual, but there
      aren't. Both subgroups report 0 messages and after entering/ exiting
      the nnvirtual group gnus is convinced that there aren't any messages.

    o nndraft: Is there a way to save buffer-local variables as fill-prefix
      as well?

    So far, maybe more to come...

    Regards -- Peter
-- 
Consultant der CLASS AG   http://www.class.de
Professional Services
mobil +49 (0) 172/837 91 25
mailto:Peter.Weiss@class.de

Re: Questions on ognus-0.07

[Kai Großjohann]

Peter.Weiss@germany.sun.com (Peter Weiss, Sun Microsystems, Germany) writes:

>       BTW: How are messages delimted in a nnmbox file? It seems a bit
>       corrupted now cause messages aren't split correctly, maybe I need to
>       fix this manually.

Each message starts with a From_ line.  That's a line where the first
five(!) characters are "From ".  Note the space.

Each message ends with an empty line.  That's two consecutive newline
characters.

Usually, this means that a message must not contain a From_ line,
except at the beginning.  But Gnus has been augmented to look at
Content-Length (I think) and Lines headers so that From_ lines in the
middle are not a problem.

kai
-- 
A large number of young women don't trust men with beards.  (BFBS Radio)

Re: Questions on ognus-0.07

[Simon Josefsson]

Peter.Weiss@germany.sun.com (Peter Weiss, Sun Microsystems, Germany) writes:

>     o Imap Access over SSL:
>
>       Is there a way to retrieve an imap box with client X.509
>       authentification over a local ssl connection tunneled through https?
>
>       I've tried the following:
>
>         (nnimap "Class"
>                 (nnimap-address "localhost")
>                 (nnimap-server-port 9993)
>                 (nnimap-stream ssl))
>
>       But I only get the error message:
>
>       Reading active file from Class via nnimap...
>       Opening nnimap server on Class...
>       Denied server
>       Opening nnimap server on Class...failed

You must install OpenSSL and ssl.el from, e.g., W3.

>       According to 
>
>         http://mail.gnu.org/pipermail/emacs-devel/2002-February/005386.html
>
>       that google retrieved I guess this is planned for Emacs21.3 using
>       GnuTLS lib. So chances are bad?

No, that work wasn't accepted so the OpenSSL/ssl.el solution will remain.

Re: Questions on ognus-0.07

[Peter Weiss, Sun Microsystems, Germany]

>>>>> On Wed, 07 Aug 2002 13:23:23 +0200, Simon Josefsson <jas@extundo.com> said:

Simon> Peter.Weiss@germany.sun.com (Peter Weiss, Sun Microsystems, Germany) writes:
>> o Imap Access over SSL:
>> 
>> Is there a way to retrieve an imap box with client X.509
>> authentification over a local ssl connection tunneled through https?
>> 
>> I've tried the following:
>> 
>> (nnimap "Class"
>> (nnimap-address "localhost")
>> (nnimap-server-port 9993)
>> (nnimap-stream ssl))
>> 
>> But I only get the error message:
>> 
>> Reading active file from Class via nnimap...
>> Opening nnimap server on Class...
>> Denied server
>> Opening nnimap server on Class...failed

Simon> You must install OpenSSL and ssl.el from, e.g., W3.

Thanks, this sounds optimistic!

I installed Version: 1.2 of ssl.el which looks a bit out of date, but anyway.

Now I get in the message buffer:

Opening nnimap server on Class...
imap: Connecting to localhost...
Loading cl-macs...done
imap: Opening SSL connection with `openssl s_client -quiet -ssl3 -connect %s:%p'...
imap: Opening SSL connection with `openssl s_client -quiet -ssl2 -connect %s:%p'...
imap: Connecting to localhost...failed
Opening nnimap server on Class...failed

From the process list I see openssl getting started:

    11179 /bin/sh -c openssl s_client -quiet -ssl2 -connect localhost:9993
      11180 openssl s_client -quiet -ssl2 -connect localhost:9993

Trussing openssl gives:

poll(0xFFBEEF40, 2, -1)         (sleeping...)
poll(0xFFBEEF40, 2, -1)                         = 1
read(4, 0x00171438, 2)                          = 0
getpid()                                        = 11231 [11230]
getpid()                                        = 11231 [11230]
getpid()                                        = 11231 [11230]
getpid()                                        = 11231 [11230]
getpid()                                        = 11231 [11230]
shutdown(4, 0, 1)                               = 0
close(4)                                        = 0
getpid()                                        = 11231 [11230]
getpid()                                        = 11231 [11230]
llseek(0, 0, SEEK_CUR)                          Err#29 ESPIPE
_exit(0)

From my https wrapper I see some traffic going in both directions, that dies
after a while, than nothing seems to happen, no password interaction is
prompted.

Any further hints?

     Peter

-- 
Consultant der CLASS AG   http://www.class.de
Professional Services
mobil +49 (0) 172/837 91 25
mailto:Peter.Weiss@class.de

Re: Questions on ognus-0.07

[Simon Josefsson]

Peter.Weiss@germany.sun.com (Peter Weiss, Sun Microsystems, Germany) writes:

> From the process list I see openssl getting started:
>
>     11179 /bin/sh -c openssl s_client -quiet -ssl2 -connect localhost:9993
>       11180 openssl s_client -quiet -ssl2 -connect localhost:9993
>
> Trussing openssl gives:
>
> poll(0xFFBEEF40, 2, -1)         (sleeping...)
> poll(0xFFBEEF40, 2, -1)                         = 1
> read(4, 0x00171438, 2)                          = 0
> getpid()                                        = 11231 [11230]
> getpid()                                        = 11231 [11230]
> getpid()                                        = 11231 [11230]
> getpid()                                        = 11231 [11230]
> getpid()                                        = 11231 [11230]
> shutdown(4, 0, 1)                               = 0
> close(4)                                        = 0
> getpid()                                        = 11231 [11230]
> getpid()                                        = 11231 [11230]
> llseek(0, 0, SEEK_CUR)                          Err#29 ESPIPE
> _exit(0)
>
> From my https wrapper I see some traffic going in both directions, that dies
> after a while, than nothing seems to happen, no password interaction is
> prompted.
>
> Any further hints?

Is your OpenSSL installation working?

Try running the command above on the command line, you should get a
IMAP protocol prompt.  If not, it is an OpenSSL problem.

Re: Questions on ognus-0.07

[Peter Weiss, Sun Microsystems, Germany]

>>>>> On Wed, 07 Aug 2002 17:28:24 +0200, Simon Josefsson <jas@extundo.com> said:

Simon> Peter.Weiss@germany.sun.com (Peter Weiss, Sun Microsystems, Germany) writes:
Simon> [...]

Simon> Is your OpenSSL installation working?

Simon> Try running the command above on the command line, you should get a
Simon> IMAP protocol prompt.  If not, it is an OpenSSL problem.

Hello,

one step further:

I manage successfull ssl connection with using

openssl s_client -quiet -connect localhost:9993 -ssl3 -cert usercert.pem
                 -key userkey.pem -CAfile rootca.crt

(localhost:9993 is tunneled by https through firewall)

when I set imap-ssl-program to the appropriate value, I'm not even getting
asked for the private key's password. This seems to be a gnus/ emacs related
issue.

Is imap-ssl-program not the correct var to store this?

Thanks for further hints -- Peter

-- 
Consultant der CLASS AG   http://www.class.de
Professional Services
mobil +49 (0) 172/837 91 25
mailto:Peter.Weiss@class.de

Re: Questions on ognus-0.07

[Peter Weiss, Sun Microsystems, Germany]

>>>>> On Mon, 12 Aug 2002 13:36:43 +0200, Peter.Weiss@germany.sun.com (Peter Weiss, Sun Microsystems, Germany) said:
me> [...]

me> one step further:

me> I manage successfull ssl connection with using

me> openssl s_client -quiet -connect localhost:9993 -ssl3 -cert usercert.pem
me>                  -key userkey.pem -CAfile rootca.crt

me> (localhost:9993 is tunneled by https through firewall)

me> when I set imap-ssl-program to the appropriate value, I'm not even getting
me> asked for the private key's password. This seems to be a gnus/ emacs related
me> issue.

me> Is imap-ssl-program not the correct var to store this?

me> [...]


Additional information from the *imap-log* log buffer confirms this:

Enter PEM pass phrase:
unable to get private key from '/home/pw105345/Mail/Peter_Weiss_userkey.pem'
13893:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:114:
13893:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:430:
13893:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:missing asn1 eos:ssl_rsa.c:707:


Regards -- Peter

-- 
Consultant der CLASS AG   http://www.class.de
Professional Services
mobil +49 (0) 172/837 91 25
mailto:Peter.Weiss@class.de