[Users] [Bug 4227] ClawsMail IMAP to Verizon email imap.aol.com started failing with *** SSL/TLS handshake failed

[noreply at thewildbeast.co.uk]

https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4227

--- Comment #9 from Michael Rasmussen <mir at datanom.net> ---
Since you are experiencing the problems on Windows and since the claws-mail
build uses its own package version of gnutls/openssl it could be a problem with
the packaged version of the SSL libraries.

Doing: openssl s_client -connect imap.aol.com:993
displays a valid certificate which is verified ok here:
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID:
5D2B6C9A905659A34F1E039C76B2BA51FDF01D957A82017CB8B8E3700E6DFB55
    Session-ID-ctx: 
    Master-Key:
5E58A2710A0AE5E42209E64545514D9F83DD173DBAFD083DD3BD6CB453F7245B9D08C1D60CC5DA2E99D6DB528C613E27
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1563126938
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no

I lean towards an incompatibility with the supplied SSL libraries with
claws-mail but since I don't have windows here I cannot verify.

imap.aol.com offers these signature algorithms:
Requested Signature Algorithms:
ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA1:RSA+SHA1

So if the supplied SSL libraries on Windows does not support those then it will
fail to make a connection.

-- 
You are receiving this mail because:
You are the assignee for the bug.