[Users] [Bug 3684] Socket error with POP3 using TLS client certificate

noreply at thewildbeast.co.uk noreply at thewildbeast.co.uk
Fri Sep 2 22:26:26 CEST 2016


http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3684

--- Comment #2 from Thomas Orgis <thomas-forum at orgis.org> ---
It also works with gnutls-cli:

shell$ gnutls-cli -s -p 110 --insecure --x509keyfile=username.key
--x509certfile=username.cert example.org
Processed 0 CA certificate(s).
Processed 1 client X.509 certificates...
Resolving 'example.org'...
Connecting to '123.123.123.123'...

- Simple Client Mode:

+OK Dovecot ready.
stls
+OK Begin TLS negotiation now.
*** Starting TLS handshake
- Certificate type: X.509
- Got a certificate list of 1 certificates.
- Certificate[0] info: [...]
- Status: The certificate is NOT trusted. The certificate issuer is unknown.
The name in the certificate does not match the expected. 
*** PKI verification of server certificate failed...
- Successfully sent 1 certificate(s) to server.
- Description: (TLS1.2)-(ECDHE-RSA-SECP256R1)-(AES-256-GCM)
- Session ID: [...]
- Ephemeral EC Diffie-Hellman parameters
 - Using curve: SECP256R1
 - Curve size: 256 bits
- Version: TLS1.2
- Key Exchange: ECDHE-RSA
- Server Signature: RSA-SHA256
- Client Signature: RSA-SHA512
- Cipher: AES-256-GCM
- MAC: AEAD
- Compression: NULL
- Options: safe renegotiation,
USER username
+OK
PASS blabla
+OK Logged in.
list
+OK 148 messages:
1 2120
2 13332
3 1040
4 995
5 1280
6 29042
[...]
.
quit
+OK Logging out.
- Peer has closed the GnuTLS connection

-- 
You are receiving this mail because:
You are the assignee for the bug.



More information about the Users mailing list