Mac OS X smtpmail "encryption too weak"

Mac OS X smtpmail "encryption too weak"

[Gilbert Harman]

I used to be able to use emacs to connect to the mail server at my
university, but recently the university smtp server has required
authentication and now I get the following error: "encryption too weak"

503 5.7.0 encryption too weak 0 less than 39
221 2.0.0 smtpserver2.Princeton.EDU closing connection
smtpmail-send-it: Sending failed; SMTP protocol error

I am using Mac OS 10.2.1 and emacs 21.3.50.1.  In addition to the rmail
stuff that used to work, my .emacs file includes:

(setq smtpmail-auth-credentials
      '(("smptauth.princeton.edu" 25 "myusername" "mypassword")))
(setq smtpmail-starttls-credentials
      '(("smptauth.princeton.edu" 25 "~/.my_smtp_tls.key"
         "~/.my_smtp_tls.cert")))

I have no trouble using the Mac Mail program to send and receive mail using
the new authentication.  But I can't seem to get mail working from within
emacs.

 gil

Re: Mac OS X smtpmail "encryption too weak"

[Simon Josefsson]

Gilbert Harman <harman@Princeton.EDU> writes:

> I used to be able to use emacs to connect to the mail server at my
> university, but recently the university smtp server has required
> authentication and now I get the following error: "encryption too weak"
>
> 503 5.7.0 encryption too weak 0 less than 39
> 221 2.0.0 smtpserver2.Princeton.EDU closing connection
> smtpmail-send-it: Sending failed; SMTP protocol error
>
> I am using Mac OS 10.2.1 and emacs 21.3.50.1.  In addition to the rmail
> stuff that used to work, my .emacs file includes:
>
> (setq smtpmail-auth-credentials
>       '(("smptauth.princeton.edu" 25 "myusername" "mypassword")))
> (setq smtpmail-starttls-credentials
>       '(("smptauth.princeton.edu" 25 "~/.my_smtp_tls.key"
>          "~/.my_smtp_tls.cert")))
>
> I have no trouble using the Mac Mail program to send and receive mail using
> the new authentication.  But I can't seem to get mail working from within
> emacs.

If you frob `smtpmail-debug-info', how do the trace buffer look?  Is
STARTTLS activated? Are authentication used?  Do you know exactly what
the server requires, in terms of security level?

Re: Mac OS X smtpmail "encryption too weak"

[Gilbert Harman]

On 10/26/02 6:49 AM, "Simon Josefsson" <jas@extundo.com> wrote:

> If you frob `smtpmail-debug-info', how do the trace buffer look?  Is
> STARTTLS activated? Are authentication used?  Do you know exactly what
> the server requires, in terms of security level?

I don't know how to answer your last question.  This is what the trace
buffer looks like, after "pleased to meet you":

250-ENHANCEDSTATUSCODES
250-PIPELINING
250-EXPN
250-VERB
250-8BITMIME
250-SIZE 12288000
250-DSN
250-ETRN
250-AUTH LOGIN PLAIN
250-STARTTLS
250-DELIVERBY
250 HELP
MAIL FROM: <harman@princeton.edu> SIZE=318
503 5.7.0 encryption too weak 0 less than 39
QUIT

Re: Mac OS X smtpmail "encryption too weak"

[Simon Josefsson]

Gilbert Harman <harman@Princeton.EDU> writes:

> On 10/26/02 6:49 AM, "Simon Josefsson" <jas@extundo.com> wrote:
>
>> If you frob `smtpmail-debug-info', how do the trace buffer look?  Is
>> STARTTLS activated? Are authentication used?  Do you know exactly what
>> the server requires, in terms of security level?
>
> I don't know how to answer your last question.  This is what the trace
> buffer looks like, after "pleased to meet you":
>
> 250-ENHANCEDSTATUSCODES
> 250-PIPELINING
> 250-EXPN
> 250-VERB
> 250-8BITMIME
> 250-SIZE 12288000
> 250-DSN
> 250-ETRN
> 250-AUTH LOGIN PLAIN
> 250-STARTTLS
> 250-DELIVERBY
> 250 HELP
> MAIL FROM: <harman@princeton.edu> SIZE=318
> 503 5.7.0 encryption too weak 0 less than 39
> QUIT

It seems no STARTTLS nor authentication took place (and this is
probably why the server complains).  Are you sure the configuration is
correct?  Have you installed the external STARTTLS binary?  It is
required for STARTTLS.