Timo Sirainen escreveu:
See if you can get gnutls-cli from somewhere (gnutls-utils package I
think?). Using the gnutls-cli command from my previous mail would show
if your OpenSSL is at least able to use compression. Anyway I wouldn't
be surprised if you couldn't find any clients that are really able to
use compression.
i got gnutls-cli from gnutls-utils package ... but it's probably a
different version from yours, because yours exactly command line gives
error:
[r...@correio dovecot]# gnutls-cli --priority NORMAL:+COMP-DEFLATE
--insecure -p 993 localhost
Invalid option 'priority'
Error in the arguments. Use the --help or -h parameters to get more
information.
[r...@correio dovecot]#
[r...@correio dovecot]# gnutls-cli --version
GNU TLS test client, version 1.4.1. Libgnutls 1.4.1.
[r...@correio dovecot]#
from man page, i have the option:
--comp comp1 comp2...
Compression methods to enable (use gnutls-cli --list to
show the supported compression methods).
--list gives
[r...@correio dovecot]# gnutls-cli --list
Certificate types: X.509, OPENPGP
Protocols: TLS1.0, TLS1.1, SSL3.0
Ciphers: AES-256-CBC, AES-128-CBC, 3DES-CBC, ARCFOUR, ARCFOUR-40
MACs: MD5, RMD160, SHA1
Key exchange algorithms: RSA, RSA-EXPORT, DHE-DSS, DHE-RSA, DHE-PSK,
PSK, SRP, SRP-RSA, SRP-DSS, ANON-DH
Compression methods: DEFLATE, LZO, NULL
[r...@correio dovecot]#
trying LZO and DEFLATE gives an error:
[r...@correio dovecot]# gnutls-cli --insecure -p 993 localhost --comp
LZO
Resolving 'localhost'...
Connecting to '127.0.0.1:993'...
*** Fatal error: A TLS fatal alert has been received.
*** Received alert [50]: Decode error
*** Handshake has failed
GNUTLS ERROR: A TLS fatal alert has been received.
[r...@correio dovecot]#
and in maillog:
Sep 28 15:35:05 correio dovecot: imap-login: Disconnected (no auth
attempts): rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept()
failed: error:1408A0BB:SSL routines:SSL3_GET_CLIENT_HELLO:no compression
specified
do the IMAP4 server you tried is remotely accessible so i can try
from a different machine ? Maybe we're dealing with some client lack of
compatibility and not server one ......
--
Atenciosamente / Sincerily,
Leonardo Rodrigues
Solutti Tecnologia
http://www.solutti.com.br
Minha armadilha de SPAM, NÃO mandem email
gertru...@solutti.com.br
My SPAMTRAP, do not email it
