From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Rainer Orth Newsgroups: gmane.emacs.bugs Subject: bug#13406: 24.2.92; gnus fails imap connection with TLS Date: Tue, 15 Jan 2013 11:24:29 +0100 Message-ID: References: <87hamn7qvh.fsf@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1358245540 32640 80.91.229.3 (15 Jan 2013 10:25:40 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 15 Jan 2013 10:25:40 +0000 (UTC) To: 13406@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Tue Jan 15 11:25:56 2013 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Tv3iM-000637-Lj for geb-bug-gnu-emacs@m.gmane.org; Tue, 15 Jan 2013 11:25:54 +0100 Original-Received: from localhost ([::1]:52224 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tv3i6-0000GF-Bh for geb-bug-gnu-emacs@m.gmane.org; Tue, 15 Jan 2013 05:25:38 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:45721) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tv3i3-0000Fe-6R for bug-gnu-emacs@gnu.org; Tue, 15 Jan 2013 05:25:37 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Tv3i2-0001dN-2v for bug-gnu-emacs@gnu.org; Tue, 15 Jan 2013 05:25:35 -0500 Original-Received: from debbugs.gnu.org ([140.186.70.43]:55487) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Tv3i1-0001dI-Vj for bug-gnu-emacs@gnu.org; Tue, 15 Jan 2013 05:25:34 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.72) (envelope-from ) id 1Tv3iT-00087f-Nn; Tue, 15 Jan 2013 05:26:01 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Rainer Orth Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org, bugs@gnus.org Resent-Date: Tue, 15 Jan 2013 10:26:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 13406 X-GNU-PR-Package: emacs,gnus X-GNU-PR-Keywords: Original-Received: via spool by 13406-submit@debbugs.gnu.org id=B13406.135824550531158 (code B ref 13406); Tue, 15 Jan 2013 10:26:01 +0000 Original-Received: (at 13406) by debbugs.gnu.org; 15 Jan 2013 10:25:05 +0000 Original-Received: from localhost ([127.0.0.1]:60948 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1Tv3hZ-00086V-Fs for submit@debbugs.gnu.org; Tue, 15 Jan 2013 05:25:05 -0500 Original-Received: from snape.cebitec.uni-bielefeld.de ([129.70.160.84]:50266 helo=smtp-relay.CeBiTec.Uni-Bielefeld.DE) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1Tv3hW-000865-CQ for 13406@debbugs.gnu.org; Tue, 15 Jan 2013 05:25:03 -0500 Original-Received: from localhost (localhost.CeBiTec.Uni-Bielefeld.DE [127.0.0.1]) by smtp-relay.CeBiTec.Uni-Bielefeld.DE (Postfix) with ESMTP id EB42E695 for <13406@debbugs.gnu.org>; Tue, 15 Jan 2013 11:24:31 +0100 (CET) X-Virus-Scanned: amavisd-new at cebitec.uni-bielefeld.de Original-Received: from smtp-relay.CeBiTec.Uni-Bielefeld.DE ([127.0.0.1]) by localhost (malfoy.CeBiTec.Uni-Bielefeld.DE [127.0.0.1]) (amavisd-new, port 10024) with LMTP id I7RlRk3FyC8h for <13406@debbugs.gnu.org>; Tue, 15 Jan 2013 11:24:30 +0100 (CET) Original-Received: from lokon.CeBiTec.Uni-Bielefeld.DE (lokon.CeBiTec.Uni-Bielefeld.DE [129.70.161.110]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp-relay.CeBiTec.Uni-Bielefeld.DE (Postfix) with ESMTPS id 54FD2694 for <13406@debbugs.gnu.org>; Tue, 15 Jan 2013 11:24:30 +0100 (CET) Original-Received: (from ro@localhost) by lokon.CeBiTec.Uni-Bielefeld.DE (8.14.5+Sun/8.14.5/Submit) id r0FAOTOC009603; Tue, 15 Jan 2013 11:24:29 +0100 (MET) X-Authentication-Warning: lokon.CeBiTec.Uni-Bielefeld.DE: ro set sender to ro@CeBiTec.Uni-Bielefeld.DE using -f In-Reply-To: <87hamn7qvh.fsf@lifelogs.com> (Ted Zlatanov's message of "Fri, 11 Jan 2013 09:09:54 -0500") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.2.92 (usg-unix-v) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:69802 Archived-At: Ted Zlatanov writes: > Can you try from the command line, with `gnutls-cli'? gnutls-cli isn't installed on Solaris 11, so I built the upstream version of gnutls 2.8.6 myself. With the unchanged version, imap with TLS works fine. I've then dug up the build receipe on opensolaris.org and found that the fix for CVE-2012-1573 is wrong: while upstream http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=422214868061370aeeb0ac9cd0f021a5c350a57d;hp=cfea38b5482c21fe6ddffaddc59a0040f80bd578 uses a ciphertext.size < hash_size test, Solaris has http://src.opensolaris.org/source/xref/jds/spec-files/branches/gnome-2-30-s11update/patches/gnutls-02-cve-2012-1573.diff > hash_size instead. So the report is invalid and I'll report upstream. Rainer -- ----------------------------------------------------------------------------- Rainer Orth, Center for Biotechnology, Bielefeld University