Force STARTTLS connection with IMAP

Force STARTTLS connection with IMAP

[Joel J. Adamson]

[-- Attachment #1.1: Type: text/plain, Size: 1935 bytes --]

Hello Fellow Gnusers,

I have the following .gnus.el on two machines running Emacs from bzr[1]
on Fedora 13, connecting to a university IMAP server (Cyrus IMAP):

(setq gnus-select-method '(nntp "news.gwene.org"))
(setq imap-default-user "adamsonj")
;; gnus customization file
(setq gnus-secondary-select-methods
      '((nnimap "UNC"
		(nnimap-address "imap.unc.edu")
		(nnimap-server-port 143))))

(setq gnus-message-archive-method (car gnus-secondary-select-methods))
(setq gnus-message-archive-group "nnimap+UNC:INBOX.Sent")
(setq gnus-gcc-mark-as-read t)

Note that I have not specified `nnimap-stream'.  On my campus
workstation I see a slew of messages as Gnus tries to connect, which
settles on "Connecting with STARTTLS..." and everything proceeds
according to plan (i.e. Gnus connects, downloads messages, etc).  On my
home machine (off-campus), however I get

Opening nnimap server on UNC...
Opening TLS connection to `imap.unc.edu'...
Opening TLS connection with `gnutls-cli -p 143 imap.unc.edu'...failed
Opening TLS connection with `gnutls-cli -p 143 imap.unc.edu --protocols ssl3'...failed
Opening TLS connection with `openssl s_client -connect imap.unc.edu:143 -no_ssl2 -ign_eof'...done

and then nothing happens (Emacs just sits there with no blinking
cursor).

My question is why doesn't the machine at home go through the same set
of protocols, and why does it arrive at a different solution?  Is there
a way to force it to use STARTTLS?  I tried specifying

(nnimap-stream starttls)

and it does exactly the same thing as when I leave it unspecified.

Evolution connects flawlessly from home.

Thanks for any help,

Joel

Footnotes: 
[1]  GNU Emacs 24.0.50.1 (i686-pc-linux-gnu, GTK+ Version 2.20.1)
 of 2010-09-25 

-- 
Joel J. Adamson	-- http://www.unc.edu/~adamsonj
University of North Carolina at Chapel Hill
CB #3280, Coker Hall
Chapel Hill, NC 27599-3280

[-- Attachment #1.2: Type: application/pgp-signature, Size: 197 bytes --]

[-- Attachment #2: Type: text/plain, Size: 161 bytes --]

_______________________________________________
info-gnus-english mailing list
info-gnus-english@gnu.org
http://lists.gnu.org/mailman/listinfo/info-gnus-english

Re: Force STARTTLS connection with IMAP

[Drew Raines]

Joel J. Adamson wrote:

> I have the following .gnus.el on two machines running Emacs from bzr[1]
> on Fedora 13, connecting to a university IMAP server (Cyrus IMAP):

[...]

> Footnotes: 
> [1]  GNU Emacs 24.0.50.1 (i686-pc-linux-gnu, GTK+ Version 2.20.1)
>  of 2010-09-25 

Lars has been hacking on nnimap aggressively over the last month.  I
too was having trouble this morning getting anything other than ssl
working.  You should post your report to ding and follow it for any
related issues.

http://news.gmane.org/gmane.emacs.gnus.general

-Drew

Re: Force STARTTLS connection with IMAP

[Lars Magne Ingebrigtsen]

Lars Magne Ingebrigtsen <larsi@gnus.org> writes:

> If you put
>
>   (nnimap-stream starttls)
>
> into the server definition and restart, it should use STARTTLS.  

Well, if you use a version that's new enough, that is.  I think this
started working some time yesterday again.

-- 
(domestic pets only, the antidote for overdose, milk.)
  larsi@gnus.org * Lars Magne Ingebrigtsen