[Users] Live.com problem

Jerry jerry at seibercom.net
Fri Nov 16 15:34:27 CET 2018


On Fri, 16 Nov 2018 05:31:47 -0600, Ed Ahlsen-Girard stated:

>> On Thu, 15 Nov 2018 20:48:50 -0600
>> Ed Ahlsen-Girard <eagirard at cox.net> wrote:
>>   
>> > ** (claws-mail:24024): WARNING **: 20:39:51.968: [20:39:51] SSL/TLS
>> > handshake failed  
>> Above is your error. If you were able to get any meaningful back using
>> telnet which is plain text then it could indicate that the server does
>> not speak SSL over port 993 as one could expect.
>> 
>> Instead of telnet try openssl s_client to verify that SSL is infact
>> working.
>> 
>Results of openssl s_client below signature. Appears to connect.

//truncated//

I got a slightly different output, but I did request more info.

openssl s_client -connect imap-mail.outlook.com:993 -tls1_2 -showcerts

CONNECTED(00000003)
---
Certificate chain
 0 s:/C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=outlook.com
   i:/C=US/O=DigiCert Inc/CN=DigiCert Cloud Services CA-1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:/C=US/O=DigiCert Inc/CN=DigiCert Cloud Services CA-1
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=outlook.com
issuer=/C=US/O=DigiCert Inc/CN=DigiCert Cloud Services CA-1
---
No client certificate CA names sent
Peer signing digest: SHA1
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3863 bytes and written 433 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 78450000358A06D84EE8AAAAC631BBF14D44672E152C9709D43086E984847EC9
    Session-ID-ctx: 
    Master-Key: D4EE066B6F9087FFFB6CFD2D36EEC9AA165C95CD3E86268E9A9D032B95B5D46F67B7DA22C0218321C45E9399EFE823A3
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1542378556
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
---
* OK The Microsoft Exchange IMAP4 service is ready. [QgBOADcAUABSADEAMABDAEEAMAAwADEAOAAuAG4AYQBtAHAAcgBkADEAMAAuAHAAcgBvAGQALgBvAHUAdABsAG8AbwBrAC4AYwBvAG0A]






More information about the Users mailing list