tls question

tls question

[bxf4]

Hello,

After many days of trying, I have authenticated smtp working with my
ISP's smtp servers, gnus, and smtpmail by using TLS via starttls.el.
My question is how can I tell if TLS is actually working?  My computer
issues the STARTTLS command, but I don't see any of the handshake,
etc. information that the starttls.el file shows.  Here's the relevant
part of my .emacs:

(setq starttls-gnutls-program "/usr/local/bin/gnutls-cli"
      starttls-program nil
      starttls-use-gnutls t
;; doesn't seem to help here, maybe need to somehow route output to another buffer?
;;      starttls-extra-arguments '("--debug" "1")
      smtpmail-starttls-credentials 
      '(("smtp.isp.com" 587 nil nil)))

As you can see, I tried to add the debug argument, but the smtp trace
did not look any different.  Please also note the final two nil
arguments to smtpmail-starttls-credentials.  I've seen this one the
web, but I don't understand how TLS will work with the key and
certificate.  Is that part of the problem?

Part of the trace follows.  Thank you for any input you may have.


220 smtp.isp.com ESMTP Sendmail 8.13.4+UW05.04/8.13.4+UW05.07; Fri, 5 Aug 2005 14:23:34 -0700

Process SMTP killed
EHLO dhcp.isp.com
250-smtp.isp.com Hello dhcp.isp.com [IP deleted], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-EXPN
250-VERB
250-8BITMIME
250-SIZE 60000000
250-AUTH GSSAPI
250-STARTTLS
250-DELIVERBY
250 HELP
STARTTLS
220 2.0.0 Ready to start TLS
EHLO dhcp.isp.com
250-smtp.isp.com Hello dhcp.isp.com [IP deleted], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING

[...]

050 >>> EHLO smtp.isp.com
050 250-mxout.isp.com Hello smtp.isp.com [IP deleted], pleased to meet you
050 250-ENHANCEDSTATUSCODES
050 250-PIPELINING
050 250-EXPN
050 250-VERB
050 250-8BITMIME
050 250-SIZE 60000000
050 250-ETRN
050 250-STARTTLS
050 250-DELIVERBY
050 250 HELP
050 >>> STARTTLS
050 220 2.0.0 Ready to start TLS
050 >>> EHLO smtp.isp.com

[...]

250 2.0.0 j75LNYdv029427 Message accepted for delivery
QUIT
221 2.0.0 smtp.isp.com closing connection
- Peer has closed the GNUTLS connection

Re: tls question

[Brian P. Flaherty]

I'm very sorry for the multiple posts.  When I hit C-c C-c, emacs/gnus
just hung on a message in the minibuffer indicating that it was
posting via nntp, but never came out of that.  I hit C-g, thinking
that I was having trouble with the server.  Apparently, it's the same
problem as in discussed in this thread:

http://lists.gnu.org/archive/html/info-gnus-english/2005-07/msg00147.html

Again, sorry for the error.

Brian

Re: tls question

[Jochen Küpper]

bxf4@u.washington.edu writes:

> After many days of trying, I have authenticated smtp working with my
> ISP's smtp servers, gnus, and smtpmail by using TLS via starttls.el.
> My question is how can I tell if TLS is actually working?

Does setting smtpmail-debug-info t help?

,----[ C-h v smtpmail-debug-info RET ]
| smtpmail-debug-info's value is nil
| 
| Whether to print info in buffer *trace of SMTP session to <somewhere>*.
| See also `smtpmail-debug-verb' which determines if the SMTP protocol should
| be verbose as well.
| 
| You can customize this variable.
| 
| Defined in `smtpmail'.
| 
| [back]
`----

Greetings,
Jochen
-- 
Einigkeit und Recht und Freiheit                http://www.Jochen-Kuepper.de
    Liberté, Égalité, Fraternité                GnuPG key: CC1B0B4D
        (Part 3 you find in my messages before fall 2003.)

Re: tls question

[Brian P. Flaherty]

Jochen Küpper <jochen@fhi-berlin.mpg.de> writes:

> bxf4@u.washington.edu writes:
>
>> After many days of trying, I have authenticated smtp working with my
>> ISP's smtp servers, gnus, and smtpmail by using TLS via starttls.el.
>> My question is how can I tell if TLS is actually working?
>
> Does setting smtpmail-debug-info t help?

Thank you for the response and I apologize for the delay in my
response.  I need to reconfigure gnus to work properly with my NNTP
server.

Unfortunately, smtpmail-debug-info does not help.  I've had it set,
but I don't see messages of the sort in the starttls.el file. 

tls question

[bxf4]

Hello,

After many days of trying, I have authenticated smtp working with my
ISP's smtp servers, gnus, and smtpmail by using TLS via starttls.el.
My question is how can I tell if TLS is actually working?  My computer
issues the STARTTLS command, but I don't see any of the handshake,
etc. information that the starttls.el file shows.  Here's the relevant
part of my .emacs:

(setq starttls-gnutls-program "/usr/local/bin/gnutls-cli"
      starttls-program nil
      starttls-use-gnutls t
;; doesn't seem to help here, maybe need to somehow route output to another buffer?
;;      starttls-extra-arguments '("--debug" "1")
      smtpmail-starttls-credentials 
      '(("smtp.isp.com" 587 nil nil)))

As you can see, I tried to add the debug argument, but the smtp trace
did not look any different.  Please also note the final two nil
arguments to smtpmail-starttls-credentials.  I've seen this one the
web, but I don't understand how TLS will work with the key and
certificate.  Is that part of the problem?

Part of the trace follows.  Thank you for any input you may have.


220 smtp.isp.com ESMTP Sendmail 8.13.4+UW05.04/8.13.4+UW05.07; Fri, 5 Aug 2005 14:23:34 -0700

Process SMTP killed
EHLO dhcp.isp.com
250-smtp.isp.com Hello dhcp.isp.com [IP deleted], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-EXPN
250-VERB
250-8BITMIME
250-SIZE 60000000
250-AUTH GSSAPI
250-STARTTLS
250-DELIVERBY
250 HELP
STARTTLS
220 2.0.0 Ready to start TLS
EHLO dhcp.isp.com
250-smtp.isp.com Hello dhcp.isp.com [IP deleted], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING

[...]

050 >>> EHLO smtp.isp.com
050 250-mxout.isp.com Hello smtp.isp.com [IP deleted], pleased to meet you
050 250-ENHANCEDSTATUSCODES
050 250-PIPELINING
050 250-EXPN
050 250-VERB
050 250-8BITMIME
050 250-SIZE 60000000
050 250-ETRN
050 250-STARTTLS
050 250-DELIVERBY
050 250 HELP
050 >>> STARTTLS
050 220 2.0.0 Ready to start TLS
050 >>> EHLO smtp.isp.com

[...]

250 2.0.0 j75LNYdv029427 Message accepted for delivery
QUIT
221 2.0.0 smtp.isp.com closing connection
- Peer has closed the GNUTLS connection

tls question

[bxf4]

Hello,

After many days of trying, I have authenticated smtp working with my
ISP's smtp servers, gnus, and smtpmail by using TLS via starttls.el.
My question is how can I tell if TLS is actually working?  My computer
issues the STARTTLS command, but I don't see any of the handshake,
etc. information that the starttls.el file shows.  Here's the relevant
part of my .emacs:

(setq starttls-gnutls-program "/usr/local/bin/gnutls-cli"
      starttls-program nil
      starttls-use-gnutls t
;; doesn't seem to help here, maybe need to somehow route output to another buffer?
;;      starttls-extra-arguments '("--debug" "1")
      smtpmail-starttls-credentials 
      '(("smtp.isp.com" 587 nil nil)))

As you can see, I tried to add the debug argument, but the smtp trace
did not look any different.  Please also note the final two nil
arguments to smtpmail-starttls-credentials.  I've seen this one the
web, but I don't understand how TLS will work with the key and
certificate.  Is that part of the problem?

Part of the trace follows.  Thank you for any input you may have.


220 smtp.isp.com ESMTP Sendmail 8.13.4+UW05.04/8.13.4+UW05.07; Fri, 5 Aug 2005 14:23:34 -0700

Process SMTP killed
EHLO dhcp.isp.com
250-smtp.isp.com Hello dhcp.isp.com [IP deleted], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-EXPN
250-VERB
250-8BITMIME
250-SIZE 60000000
250-AUTH GSSAPI
250-STARTTLS
250-DELIVERBY
250 HELP
STARTTLS
220 2.0.0 Ready to start TLS
EHLO dhcp.isp.com
250-smtp.isp.com Hello dhcp.isp.com [IP deleted], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING

[...]

050 >>> EHLO smtp.isp.com
050 250-mxout.isp.com Hello smtp.isp.com [IP deleted], pleased to meet you
050 250-ENHANCEDSTATUSCODES
050 250-PIPELINING
050 250-EXPN
050 250-VERB
050 250-8BITMIME
050 250-SIZE 60000000
050 250-ETRN
050 250-STARTTLS
050 250-DELIVERBY
050 250 HELP
050 >>> STARTTLS
050 220 2.0.0 Ready to start TLS
050 >>> EHLO smtp.isp.com

[...]

250 2.0.0 j75LNYdv029427 Message accepted for delivery
QUIT
221 2.0.0 smtp.isp.com closing connection
- Peer has closed the GNUTLS connection