Re: [GPGrelay-Talk] gpgrelay 0.95 and tls problem

[dynacore//.tSCc. <dyn...@te...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi!

> I have a problem with gpgrelay (0.95) and pop3 TLS. When I =
use POP
> over SSL (port 995) everything works fine, but when I use the
> standard port (110) and TLS, gpgrelay says:
>
> POP3s - SSL/TLS No cipher was negotiated. Aborting ...
>
> while my Courier-POP3 Server (3.0.4) says:
>
> May 27 13:58:25 soup pop3d: couriertls: accept: =
error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
>
> Can anybody help me?

Well, GPGrelay is always only using StartTLS on the =
standard-ports 25 and 110, so these Ports are always SMTP/ESMTP=
 or POP3 (although GPGrelay entitles them SMTPs/POP3s); on all =
the other ports it first tries to start SSL-Session, if failed,=
 it retries using the StartTLS-Method.

Maybe I should change the GUI to something I remember I've seen=
 done in Mozilla Mail: SSL/TLS: "Never", "Always", "If =
available" (which would be technical speaking: plain, ssl and =
starttls).

The (minor) difference is: POP3s (usually on port 995) and =
SMTPs (usually port 465) first negotiate SSL and then do their =
(secured) protocol-chitchat, while the ESMTP and POP3 using =
StartTLS enable SSL from within the protocol (so it's first =
protocol-chitchat, then SSL-Negotiation and for the rest of the=
 session (secured) protocol-chitchat).
So the "s"-Protocols are easy to enable using e.g. Stunnel, =
while the others need some support from within the protocol, =
but have the advantage of being backward compatible.

Now I believe, you configured your server that way that it uses=
 POP3s on Port 110, thus GPGrelay connects with POP3 and tries =
to issue StartTLS, but your server expects the SSL-Negotiation =
immediately and thus it denies access to the POP3-Chitchat and =
drops the connection.
For GPGrelay this error is in the SSL-Phase, so it reports an =
error there; so I guess the error-message should be more =
verbose too.



Bye!

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32) - GPGrelay v0.951

iD8DBQFAuJcRnTiKrQObWqkRAkHWAKC05Tlul8nuGutOD7t/TKu6VsvqqgCfScx6
t4Nub9adRG+++X0KOHgnTsw=3D
=3D42ls
-----END PGP SIGNATURE-----