Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported

2006-11-06 Thread David Woodhouse
On Sun, 2006-11-05 at 12:41 +, John Austin wrote:
> 
> In any event exim has never been configured to use TLS !
> 
> Having set the following in /etc/exim/exim.conf and generating the
> cert
> file
> #ja_hack
> tls_advertise_hosts = 148.197.29.3/32
> tls_certificate = /etc/exim/cert
> tls_privatekey = /etc/exim/cert

If you're using the standard config which is shipped with Fedora, that's
also worth filing in Bugzilla. It should generate a self-signed cert and
allow TLS by default, I believe.

-- 
dwmw2

___
Evolution-list mailing list
Evolution-list@gnome.org
http://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported

2006-11-05 Thread John Austin
On Sun, 2006-11-05 at 12:41 +, John Austin wrote:
> On Sun, 2006-11-05 at 19:30 +0800, David Woodhouse wrote:
> > On Fri, 2006-11-03 at 10:11 +, John Austin wrote:
> > > ehlo avon
> > > 250-maui.jaa.org.uk Hello avon [148.197.29.3]
> > > 250-SIZE 52428800
> > > 250-PIPELINING
> > > 250 HELP
> > 
> > Your server isn't advertising STARTTLS -- ignore the HELP; it should be
> > in the EHLO response.
> > 
> > Find out why -- is hosts_advertise_tls set correctly to '*'? Can Exim
> > find its TLS certificate?
> > 
> > > I'm very surprised nobody seems to have seen this.
> > > I have googled quite a lot and asked Fedora and Evolution lists.
> > 
> > If Exim stops advertising TLS after an update then bugzilla.redhat.com
> > would be the most appropriate way to deal with that.
> > 
> Hi
> 
> Many thanks for your reply
> 
> Total ignorance on my behalf!
> 
> I was misled into thinking that the older versions of evolution to exim
> were using TLS when I selected it from within evolution when they must
> have been falling back to clear text mode?
> 
> The later version of evolution presumably does not fall back?
> 
> In any event exim has never been configured to use TLS !
> 
> Having set the following in /etc/exim/exim.conf and generating the cert
> file
> #ja_hack
> tls_advertise_hosts = 148.197.29.3/32
> tls_certificate = /etc/exim/cert
> tls_privatekey = /etc/exim/cert
> 
> all works OK
> 
> ethereal/wireshark shows the communication between evolution and exim
> which is now advertising STARTTLS and the exchanges are now encrypted.
> 
> Regards
> John
> 

I have just seen the reply from
<[EMAIL PROTECTED]>
to


Re: [Evolution] Unable to relay
outside my own domain

This explains my symptoms I think

John 

___
Evolution-list mailing list
Evolution-list@gnome.org
http://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported

2006-11-05 Thread John Austin
On Sun, 2006-11-05 at 19:30 +0800, David Woodhouse wrote:
> On Fri, 2006-11-03 at 10:11 +, John Austin wrote:
> > ehlo avon
> > 250-maui.jaa.org.uk Hello avon [148.197.29.3]
> > 250-SIZE 52428800
> > 250-PIPELINING
> > 250 HELP
> 
> Your server isn't advertising STARTTLS -- ignore the HELP; it should be
> in the EHLO response.
> 
> Find out why -- is hosts_advertise_tls set correctly to '*'? Can Exim
> find its TLS certificate?
> 
> > I'm very surprised nobody seems to have seen this.
> > I have googled quite a lot and asked Fedora and Evolution lists.
> 
> If Exim stops advertising TLS after an update then bugzilla.redhat.com
> would be the most appropriate way to deal with that.
> 
Hi

Many thanks for your reply

Total ignorance on my behalf!

I was misled into thinking that the older versions of evolution to exim
were using TLS when I selected it from within evolution when they must
have been falling back to clear text mode?

The later version of evolution presumably does not fall back?

In any event exim has never been configured to use TLS !

Having set the following in /etc/exim/exim.conf and generating the cert
file
#ja_hack
tls_advertise_hosts = 148.197.29.3/32
tls_certificate = /etc/exim/cert
tls_privatekey = /etc/exim/cert

all works OK

ethereal/wireshark shows the communication between evolution and exim
which is now advertising STARTTLS and the exchanges are now encrypted.

Regards
John

___
Evolution-list mailing list
Evolution-list@gnome.org
http://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported

2006-11-05 Thread David Woodhouse
On Fri, 2006-11-03 at 10:11 +, John Austin wrote:
> ehlo avon
> 250-maui.jaa.org.uk Hello avon [148.197.29.3]
> 250-SIZE 52428800
> 250-PIPELINING
> 250 HELP

Your server isn't advertising STARTTLS -- ignore the HELP; it should be
in the EHLO response.

Find out why -- is hosts_advertise_tls set correctly to '*'? Can Exim
find its TLS certificate?

> I'm very surprised nobody seems to have seen this.
> I have googled quite a lot and asked Fedora and Evolution lists.

If Exim stops advertising TLS after an update then bugzilla.redhat.com
would be the most appropriate way to deal with that.

-- 
dwmw2

___
Evolution-list mailing list
Evolution-list@gnome.org
http://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported

2006-11-03 Thread John Austin
On Fri, 2006-11-03 at 01:41 +0100, Andre Klapper wrote:
> hi,
> 
> Am Donnerstag, den 02.11.2006, 16:34 + schrieb John Austin:
> > "Error while performing operation."
> > 
> > "Failed to connect to SMTP server 148.197.29.5 in secure mode:
> > STARTTLS not supported"
> 
> please make sure that you have not set evolution to use TLS
> ("Edit>Preferences>Mail Accounts>Edit>Security"), if your mail server
> does not support it. :-)
> 
> > Evolution now fails with the same error as FC6 !
> 
> hmm, looks like your exclamation mark key is broken.
> 
> cheers,
> andre
> 
> ___
> Evolution-list mailing list
> Evolution-list@gnome.org
> http://mail.gnome.org/mailman/listinfo/evolution-list

Hi

Many thanks for the reply

TLS is selected in evolution and exim definitely does support it.
Selecting SSL gives Connection Refused
Selecting No Encryption works OK

1. FC5 evolution works perfectly using TLS to exim
   before upgrading from evolution-2.6.0-1.i386 to
   2.6.3-1.fc5.5

2. I have also tried the following telnet connection
   and exim mentions STARTTLS

###
avon.jaa.org.uk ~ 1000# telnet maui 25
Trying 148.197.29.5...
Connected to maui.jaa.org.uk (148.197.29.5).
Escape character is '^]'.
220 maui.jaa.org.uk ESMTP Exim 4.62 Fri, 03 Nov 2006 09:00:33 +
ehlo avon
250-maui.jaa.org.uk Hello avon [148.197.29.3]
250-SIZE 52428800
250-PIPELINING
250 HELP
HELP
214-Commands supported:
214 AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
QUIT
221 maui.jaa.org.uk closing connection
Connection closed by foreign host.
avon.jaa.org.uk ~ 1001#


Are there any suitable commands I can enter to test things further using
telnet?

I'm very surprised nobody seems to have seen this.
I have googled quite a lot and asked Fedora and Evolution lists.

However I am certainly not a mailer expert !

Cheers
John




___
Evolution-list mailing list
Evolution-list@gnome.org
http://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported

2006-11-02 Thread Andre Klapper
hi,

Am Donnerstag, den 02.11.2006, 16:34 + schrieb John Austin:
> "Error while performing operation."
> 
> "Failed to connect to SMTP server 148.197.29.5 in secure mode:
> STARTTLS not supported"

please make sure that you have not set evolution to use TLS
("Edit>Preferences>Mail Accounts>Edit>Security"), if your mail server
does not support it. :-)

> Evolution now fails with the same error as FC6 !

hmm, looks like your exclamation mark key is broken.

cheers,
andre

-- 
 mailto:[EMAIL PROTECTED] | failed!
 http://www.iomc.de


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil
___
Evolution-list mailing list
Evolution-list@gnome.org
http://mail.gnome.org/mailman/listinfo/evolution-list