Please let me know if this is not the right place to send these kind of bugs... I have an IMAP e-mail account to which I always connect via SSL. In sylpheed-claws 1.0.5-r1 this works without any problems. However, in any 2.0.0_x version it does not work anymore -- sylpheed just complains that it cannot connect to the server. If I turn SSL off, everything works fine. I've found a post on the mailing list with similar problems and the solution was to downgrade libetpan to 0.39. However, this version is no longer in portage and sylpheed-claws 1.0.5-r1 works well with libetpan 0.41 and 0.42. USE flags for sylpheed-claws: -clamav +crypt +dillo +doc -gnome +imap +ipv6 -kde +ldap +pda -spamassassin +spell +ssl +xface emerge --info (I switched to -O2 to check if the problem was not with gcc but it didn't help): Portage 2.0.54 (default-linux/x86/2005.1, gcc-3.4.5, glibc-2.3.5-r2, 2.6.15-gent oo-r1 i686) ================================================================= System uname: 2.6.15-gentoo-r1 i686 Intel(R) Pentium(R) M processor 1600MHz Gentoo Base System version 1.6.14 ccache version 2.3 [enabled] dev-lang/python: 2.3.5, 2.4.2 sys-apps/sandbox: 1.2.12 sys-devel/autoconf: 2.13, 2.59-r6 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/X1 1/xkb /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/ config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-O2 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig buildpkg ccache distlocks sandbox sfperms strict" GENTOO_MIRRORS="ftp://mirror.switch.ch/mirror/gentoo http://distfiles.gentoo.org http://www.ibiblio.org/pub/Linux/distributions/gentoo" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 X alsa apm audiofile avi bash-completion berkdb bitmap-fonts bzip2 cryp t cscope cups curl eds emacs emboss encode esd exif expat flac foomaticdb fortra n gdbm gif glut gmp gpm gstreamer gtk gtk2 imagemagick imlib ipv6 jack jpeg lcms ldap libg++ libwww mad mikmod mmx mng motif mp3 mpeg ncurses nls nptl ogg oggvo rbis opengl oss pam pcre pdflib perl pic plotutils png python qt quicktime readl ine ruby samba sdl spell sse ssl tcltk tcpd tetex tiff truetype truetype-fonts t ype1-fonts udev unicode vorbis xinerama xml2 xmms xprint xv zlib userland_GNU ke rnel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS Thanks a lot in advance, Michal
Which exact version of sylpheed-claws are you using? What does `openssl s_client -connect servername:port` look like?
Has libetpan been emerged with USE="ssl" too ? it has to.
(In reply to comment #1) > Which exact version of sylpheed-claws are you using? > What does `openssl s_client -connect servername:port` look like? I tried sylpheed-claws 2.0.0_rc1 and 2.0.0_rc4 -- neither of them works with IMAP and SSL (1.0.5-r1 works, however). openssl output (unnecessary details removed): CONNECTED(00000003) depth=0 /C=CH/ST=Vaud/L=Lausanne/O=EPFL/CN=mailbox.epfl.ch/emailAddress=Nicolas.Repond@epfl.ch verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 /C=CH/ST=Vaud/L=Lausanne/O=EPFL/CN=mailbox.epfl.ch/emailAddress=Nicolas.Repond@epfl.ch verify error:num=27:certificate not trusted verify return:1 depth=0 /C=CH/ST=Vaud/L=Lausanne/O=EPFL/CN=mailbox.epfl.ch/emailAddress=Nicolas.Repond@epfl.ch verify error:num=21:unable to verify the first certificate verify return:1 --- Certificate chain 0 s:/C=CH/ST=Vaud/L=Lausanne/O=EPFL/CN=mailbox.epfl.ch/emailAddress=Nicolas.Repond@epfl.ch i:/C=CH/ST=Vaud/L=Lausanne/O=EPFL/CN=EPFL Certification Authority/emailAddress=cert-auth@epfl.ch --- Server certificate -----BEGIN CERTIFICATE----- (...) -----END CERTIFICATE----- subject=/C=CH/ST=Vaud/L=Lausanne/O=EPFL/CN=mailbox.epfl.ch/emailAddress=Nicolas.Repond@epfl.ch issuer=/C=CH/ST=Vaud/L=Lausanne/O=EPFL/CN=EPFL Certification Authority/emailAddress=cert-auth@epfl.ch --- No client certificate CA names sent --- SSL handshake has read 800 bytes and written 346 bytes --- New, TLSv1/SSLv3, Cipher is RC4-MD5 Server public key is 1024 bit SSL-Session: Protocol : SSLv3 Cipher : RC4-MD5 Session-ID: (...) Session-ID-ctx: Master-Key: (...) Key-Arg : None Start Time: 1139242567 Timeout : 300 (sec) Verify return code: 21 (unable to verify the first certificate) --- * OK Messaging Multiplexor (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004))
(In reply to comment #2) > Has libetpan been emerged with USE="ssl" too ? it has to. Yes, and I tried many versions of libetpan that are in portage now, each with ssl USE flag and neither worked. Thus, it's probably not the problem with the library but with sylpheed-claw itself.
Hm, sylpheed-claws-1.0.x certainly wasn't using libetpan, as you claim in your original post. It still had its own IMAP implementation at that time. Anyway, try remerging openssl (with --oneshot as to not clutter your world file) - I remember this helped me back when I had this exact problem with s-c 1.9.100 (I think). However, the bug which was causing this was found and fixed between libetpan and s-c.
(In reply to comment #5) > Hm, sylpheed-claws-1.0.x certainly wasn't using libetpan, as you claim in your > original post. It still had its own IMAP implementation at that time. I didn't know about that. Sorry for the confusion. > Anyway, try remerging openssl (with --oneshot as to not clutter your world > file) - I remember this helped me back when I had this exact problem with s-c > 1.9.100 (I think). However, the bug which was causing this was found and fixed > between libetpan and s-c. Did not help. I remerged openssl and tried with libetpan 0.41 and 0.42. I also tried to disable unnecessary flags (sasl and gnutls) which were set before, but it also did not help. Which may be a sign to go back to Thunderbird which works well (besides crashing from time to time -- but it has nothing to do with IMAP over SSL, I guess).
Could you send the output of sylpheed-claws --debug ?
Created attachment 79160 [details] sylpheed-claws --debug output
(In reply to comment #8) > Created an attachment (id=79160) [edit] > sylpheed-claws --debug output Attached. Note that I have to remove the ".sylpheed-claws" directory before running sylpheed-claws as otherwise the program is unusable (it doesn't show any IMAP folders) and I have to reconfigure it again anyway. Once I remove the folder, the configuration wizard shows up and I configure everything with the same data as for sylpheed 2.04 and sylpheed-claws 1.0.5 (both work well with IMAP over SSL).
tracked upstream now at http://www.thewildbeast.co.uk/sylpheed-claws/bugzilla/show_bug.cgi?id=921
