pop3 via ssl; imap

pop3 via ssl; imap

[Vladimir Volovich]

Hi,

i've got two questions:

* does gnus support getting mail from pop3 server via ssl?
  documentation only says about nntp over ssl.

* does gnus support imap? if not, are there some `not-yet-merged'
  patches for gnus flying around which add imap support?

	Best regards, -- Vladimir.

Re: pop3 via ssl; imap

[Simon Josefsson]

Vladimir Volovich <vvv@vvv.vsu.ru> writes:

> * does gnus support imap? if not, are there some `not-yet-merged'
>   patches for gnus flying around which add imap support?

Try <URL:http://www.extundo.com/nnimap/>.

Re: pop3 via ssl; imap

[Lars Magne Ingebrigtsen]

Vladimir Volovich <vvv@vvv.vsu.ru> writes:

> * does gnus support getting mail from pop3 server via ssl?

You mean setting up an ssh tunnel, and then getting pop mail via the
tunnel?  Yes, you can do that with the :prescript stuff.

There should be an example in the manual.  Could someone mail me an
example? 

-- 
(domestic pets only, the antidote for overdose, milk.)
  larsi@gnus.org * Lars Magne Ingebrigtsen

Re: pop3 via ssl; imap

[Stainless Steel Rat]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

* Lars Magne Ingebrigtsen <larsi@gnus.org>  on Sun, 28 Mar 1999
| You mean setting up an ssh tunnel, and then getting pop mail via the
| tunnel?  Yes, you can do that with the :prescript stuff.

| There should be an example in the manual.  Could someone mail me an
| example?

I've tried getting this to work, to no avail, and I posted here asking if
anyone else has, without response (there was a tangent, but no answers).

The problem is that Emacs does not detach the ssh process, which means that
it waits for the process to finish before continuing on with the POP
connection, by which time the SSH tunnel has been closed.  :prescript needs 
to be able to be asychronous for this to work.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v0.9.5 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE2/nL7gl+vIlSVSNkRAnZ4AKDgoov8g8kxO/AeBIbX1TTdi46IwgCfYMVj
oRWVgof5LKyFV6pAgjij87U=
=K/Ik
-----END PGP SIGNATURE-----

-- 
Rat <ratinox@peorth.gweep.net>    \ If Happy Fun Ball begins to smoke, get
Minion of Nathan - Nathan says Hi! \ away immediately. Seek shelter and cover
PGP Key: at a key server near you!  \ head.

Re: pop3 via ssl; imap

[William M. Perry]

Lars Magne Ingebrigtsen <larsi@gnus.org> writes:

> Vladimir Volovich <vvv@vvv.vsu.ru> writes:
> 
> > * does gnus support getting mail from pop3 server via ssl?
> 
> You mean setting up an ssh tunnel, and then getting pop mail via the
> tunnel?  Yes, you can do that with the :prescript stuff.

No, I believe he means using the pop3 + ssl port # and doing a real SSL
handshake before anything pop related.  You could do this with the 'ssl.el' 
package from Emacs/W3 pretty easily - pop3.el could just use
open-ssl-stream if a flag was set.

ssl.el requires SSLeay though.

-Bill P.

Re: pop3 via ssl; imap

[Lars Magne Ingebrigtsen]

Stainless Steel Rat <ratinox@peorth.gweep.net> writes:

> The problem is that Emacs does not detach the ssh process, which means that
> it waits for the process to finish before continuing on with the POP
> connection, by which time the SSH tunnel has been closed.  :prescript needs 
> to be able to be asychronous for this to work.

Couldn't you just put an "&" at the end of the command?  

-- 
(domestic pets only, the antidote for overdose, milk.)
  larsi@gnus.org * Lars Magne Ingebrigtsen

Re: pop3 via ssl; imap

[Stainless Steel Rat]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

* Lars Magne Ingebrigtsen <larsi@gnus.org>  on Fri, 02 Apr 1999
| Couldn't you just put an "&" at the end of the command?

I tried that.  It did not work.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v0.9.5 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE3BQOWgl+vIlSVSNkRAp34AKCEt0mYLaKFl3scO5agshOFPF1CMACfeSQy
z/3c9x+qf4yzAPUOsDQOm/o=
=NKDP
-----END PGP SIGNATURE-----

-- 
Rat <ratinox@peorth.gweep.net>    \ Do not use Happy Fun Ball on concrete.
Minion of Nathan - Nathan says Hi! \ 
PGP Key: at a key server near you!  \ 

Re: pop3 via ssl; imap

[Vladimir Volovich]

"Rat" == Stainless Steel Rat writes:

 Rat> Couldn't you just put an "&" at the end of the command?
 Rat> I tried that.  It did not work.

i've found that it is very easy to use (pop3|imap|anything) via ssl
provided that you have:

* an application which could work with (pop3|imap|anything), but is
  not "ssl-aware"

* SSLeay or openssl installed (namely, s_client)

* you are working on a unix box

then, all you need is:

* add a "fake" service name to /etc/services (for some unused port),

* add a record to /etc/inetd.conf for this service, which calls
  s_client which connects via ssl to the remote server

* tell your (pop3|imap|anything) non-ssl-aware application to connect
  to localhost (without ssl) instead of the remote server! :-)

so, the external channel will be ssl-encrypted, and the application
need not be ssl-aware at all (however, with ssl.el, nnimap works fine;
i did not find (i haven't really investigate this) a standard way to
tell pop3.el to use ssl.el's open-ssl-stream).

	Best regards, -- Vladimir.
-- 
If you live in a country run by committee, be on the committee.
		-- Graham Summer

Re: pop3 via ssl; imap

[Stainless Steel Rat]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

* Vladimir Volovich <vvv@vvv.vsu.ru>  on Fri, 02 Apr 1999
| i've found that it is very easy to use (pop3|imap|anything) via ssl
| provided that you have:

We're apparantly talking about two different things.

One of the features of pGnus is pre- and post- commands in the POP mail
fetching.  This is useful for setting up a temporary SSH tunnel to the POP
server.  The problem is that in order for it to work, the pre- command must
be asynchronous, and I have been totally unsuccessful in getting that to
happen, even with an & at the end of the command.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v0.9.5 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE3BXlkgl+vIlSVSNkRAoC7AJ4kJdG8N/bsEVuJQlLYWhLTO2m2FwCgrzT5
iN8lIb+J2/paq1d1sjfHyCE=
=3hy8
-----END PGP SIGNATURE-----

-- 
Rat <ratinox@peorth.gweep.net>    \ If Happy Fun Ball begins to smoke, get
Minion of Nathan - Nathan says Hi! \ away immediately. Seek shelter and cover
PGP Key: at a key server near you!  \ head.

Re: pop3 via ssl; imap

[Michael Welsh Duggan]

Stainless Steel Rat <ratinox@peorth.gweep.net> writes:

> * Vladimir Volovich <vvv@vvv.vsu.ru>  on Fri, 02 Apr 1999
> | i've found that it is very easy to use (pop3|imap|anything) via ssl
> | provided that you have:
> 
> We're apparantly talking about two different things.
> 
> One of the features of pGnus is pre- and post- commands in the POP mail
> fetching.  This is useful for setting up a temporary SSH tunnel to the POP
> server.  The problem is that in order for it to work, the pre- command must
> be asynchronous, and I have been totally unsuccessful in getting that to
> happen, even with an & at the end of the command.

How about using the -f option to ssh?

-- 
Michael Duggan
(md5i@cs.cmu.edu)
.

Re: pop3 via ssl; imap

[Stainless Steel Rat]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

* Michael Welsh Duggan <md5i@cs.cmu.edu>  on Sun, 04 Apr 1999
| How about using the -f option to ssh?

This is what I am trying to use:

(pop :server "localhost"
     :port 1110
     :prescript "ssh -x +C -f rei.nerv.gweep.net -L 1110:rei.nerv.gweep.net:110 sleep 120 &")

The ssh tunnel opens properly.  I can telnet to port 1110 and I talk to the
POP server on rei.  But Emacs refuses to let go the process.  It sits there
until the sleep finishes, the ssh tunnel closes, and the ssh process
terminates.  Then and only then does Gnus attempt to connect to the POP
server, over a tunnel which no longer exists.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v0.9.5 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE3B791gl+vIlSVSNkRAmyjAJ9YkSU30jVCs8aXyi2OEN2jZqL4EwCg8Zce
xG/tzDMKMHlIw01B+CncotQ=
=hTB8
-----END PGP SIGNATURE-----

-- 
Rat <ratinox@peorth.gweep.net>    \ Do not use Happy Fun Ball on concrete.
Minion of Nathan - Nathan says Hi! \ 
PGP Key: at a key server near you!  \ 

Re: pop3 via ssl; imap

[Lars Magne Ingebrigtsen]

Stainless Steel Rat <ratinox@peorth.gweep.net> writes:

> | Couldn't you just put an "&" at the end of the command?
> 
> I tried that.  It did not work.

Yup.  This should work better in 0.81.  (Not the "&" thing, but I now
use `start-process' to get asynchronous processes.)

-- 
(domestic pets only, the antidote for overdose, milk.)
  larsi@gnus.org * Lars Magne Ingebrigtsen

Re: pop3 via ssl; imap

[Stainless Steel Rat]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

* Lars Magne Ingebrigtsen <larsi@gnus.org>  on Sat, 17 Apr 1999
| Yup.  This should work better in 0.81.  (Not the "&" thing, but I now
| use `start-process' to get asynchronous processes.)

Nope... pGnus 0.83, I still get the same results.  Gnus starts the ssh
process, it opens the tunnel, and Gnus sits there until the ssh process
terminates.  This is both with and without `&'.

(setq mail-sources
      '((file)
	(pop :server "localhost"
	     :port 1111 ; sidehack.gweep.net
	     :prescript "ssh -x +C -f sidehack.gweep.net -L 1111:sidehack.gweep.net:110 sleep 10 &"
	     )
	))
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v0.9.5 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE3GeO8gl+vIlSVSNkRAuyVAJ44SyQuSQAApx/k/yqbZ8IqLTEHywCgiml8
KaAqEMVBNnKDneP8cM403GY=
=w7jA
-----END PGP SIGNATURE-----

-- 
Rat <ratinox@peorth.gweep.net>    \ Do not use Happy Fun Ball on concrete.
Minion of Nathan - Nathan says Hi! \ 
PGP Key: at a key server near you!  \ 

Re: pop3 via ssl; imap

[Lars Magne Ingebrigtsen]

Stainless Steel Rat <ratinox@peorth.gweep.net> writes:

> | Yup.  This should work better in 0.81.  (Not the "&" thing, but I now
> | use `start-process' to get asynchronous processes.)
> 
> Nope... pGnus 0.83, I still get the same results. 

How weird.  I really thought I had changed this, but I can't have,
since it's not changed.  Er.  Fix in Pterodactyl Gnus v0.84.

-- 
(domestic pets only, the antidote for overdose, milk.)
  larsi@gnus.org * Lars Magne Ingebrigtsen