Bug 463192

Summary:	net-mail/sendEmail-1.56 with dev-perl/IO-Socket-SSL-1.840.0 - fails to send mail
Product:	Gentoo Linux	Reporter:	Peter Wilmott (RETIRED) <p8952>
Component:	Current packages	Assignee:	Tony Vroon (RETIRED) <chainsaw>
Status:	RESOLVED FIXED
Severity:	normal	Keywords:	PATCH
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Change SSL_version from 'SSLv3 TLSv1' to 'SSLv3' Change SSL_version from 'SSLv3 TLSv1' to 'SSLv3'

Description Peter Wilmott (RETIRED) gentoo-dev

2013-03-25 09:03:58 UTC

It appears that dev-perl/IO-Socket-SSL-1.840.0 parsed the SSL_Version passed to it differently to version 1.440.0. net-mail/sendEmail currently hard-codes  SSL_version => 'SSLv3 TLSv1' while in dev-perl/IO-Socket-SSL-1.840.0 you should only pass a single version (plus versions to deny prefixed with :!). Since dev-perl/IO-Socket-SSL assumes SSLv3 = TLSv1 then changing sendEmail to use SSL_version => 'SSLv3' resolved this issue.

Please see the IO::Socket::SSL docs for reference: http://search.cpan.org/~sullr/IO-Socket-SSL-1.84/lib/IO/Socket/SSL.pm

I have attached a patch for this.

Reproducible: Always

Steps to Reproduce:
1./usr/bin/sendEmail -f test@test.com -xu username -xp p@ssw0rd  -s smtp.test.com:587 -u "Test" -t test@test.com
2.invalid SSL_version specified at /usr/lib64/perl5/vendor_perl/5.12.4/IO/Socket/SSL.pm line 389
Actual Results:  
Reading message body from STDIN because the '-m' option was not used.
If you are manually typing in a message:
  - First line must be received within 60 seconds.
  - End manual input with a CTRL-D on its own line.

Mar 25 07:59:12 systemname sendEmail[21148]: Message input complete.
invalid SSL_version specified at /usr/lib64/perl5/vendor_perl/5.12.4/IO/Socket/SSL.pm line 389

Expected Results:  
The output should have been "Mar 25 09:02:48 systemname sendEmail[7505]: Email was sent successfully!" and  test@test.com should have recieved an email with the subject "Test".

Patch attached.

Comment 1 Peter Wilmott (RETIRED) gentoo-dev

2013-03-25 09:04:58 UTC

Created attachment 343194 [details, diff]
Change SSL_version from 'SSLv3 TLSv1' to 'SSLv3'

Comment 2 Peter Wilmott (RETIRED) gentoo-dev

2013-03-25 09:04:58 UTC

Created attachment 343196 [details, diff]
Change SSL_version from 'SSLv3 TLSv1' to 'SSLv3'

Comment 3 Tony Vroon (RETIRED) gentoo-dev

2013-04-02 09:59:58 UTC

+*sendEmail-1.56-r1 (02 Apr 2013)
+
+  02 Apr 2013; Tony Vroon <chainsaw@gentoo.org>
+  +files/1.56-overzealous-version-check.patch, +sendEmail-1.56-r1.ebuild,
+  metadata.xml:
+  As identified & fixed by Peter Wilmott, there is an overzealous version check
+  that does not cope with newer IO-Socket-SSL packages. Taking maintainership.

Thank you for your contribution to Gentoo Linux Peter. I have taken maintainership of this apparently abandoned package so that I could apply your patch. This means further bug reports end up straight with me; please feel free to suggest further improvements that way.