Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported
On Sun, 2006-11-05 at 12:41 +, John Austin wrote: > > In any event exim has never been configured to use TLS ! > > Having set the following in /etc/exim/exim.conf and generating the > cert > file > #ja_hack > tls_advertise_hosts = 148.197.29.3/32 > tls_certificate = /etc/exim/cert > tls_privatekey = /etc/exim/cert If you're using the standard config which is shipped with Fedora, that's also worth filing in Bugzilla. It should generate a self-signed cert and allow TLS by default, I believe. -- dwmw2 ___ Evolution-list mailing list Evolution-list@gnome.org http://mail.gnome.org/mailman/listinfo/evolution-list
Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported
On Sun, 2006-11-05 at 12:41 +, John Austin wrote: > On Sun, 2006-11-05 at 19:30 +0800, David Woodhouse wrote: > > On Fri, 2006-11-03 at 10:11 +, John Austin wrote: > > > ehlo avon > > > 250-maui.jaa.org.uk Hello avon [148.197.29.3] > > > 250-SIZE 52428800 > > > 250-PIPELINING > > > 250 HELP > > > > Your server isn't advertising STARTTLS -- ignore the HELP; it should be > > in the EHLO response. > > > > Find out why -- is hosts_advertise_tls set correctly to '*'? Can Exim > > find its TLS certificate? > > > > > I'm very surprised nobody seems to have seen this. > > > I have googled quite a lot and asked Fedora and Evolution lists. > > > > If Exim stops advertising TLS after an update then bugzilla.redhat.com > > would be the most appropriate way to deal with that. > > > Hi > > Many thanks for your reply > > Total ignorance on my behalf! > > I was misled into thinking that the older versions of evolution to exim > were using TLS when I selected it from within evolution when they must > have been falling back to clear text mode? > > The later version of evolution presumably does not fall back? > > In any event exim has never been configured to use TLS ! > > Having set the following in /etc/exim/exim.conf and generating the cert > file > #ja_hack > tls_advertise_hosts = 148.197.29.3/32 > tls_certificate = /etc/exim/cert > tls_privatekey = /etc/exim/cert > > all works OK > > ethereal/wireshark shows the communication between evolution and exim > which is now advertising STARTTLS and the exchanges are now encrypted. > > Regards > John > I have just seen the reply from <[EMAIL PROTECTED]> to Re: [Evolution] Unable to relay outside my own domain This explains my symptoms I think John ___ Evolution-list mailing list Evolution-list@gnome.org http://mail.gnome.org/mailman/listinfo/evolution-list
Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported
On Sun, 2006-11-05 at 19:30 +0800, David Woodhouse wrote: > On Fri, 2006-11-03 at 10:11 +, John Austin wrote: > > ehlo avon > > 250-maui.jaa.org.uk Hello avon [148.197.29.3] > > 250-SIZE 52428800 > > 250-PIPELINING > > 250 HELP > > Your server isn't advertising STARTTLS -- ignore the HELP; it should be > in the EHLO response. > > Find out why -- is hosts_advertise_tls set correctly to '*'? Can Exim > find its TLS certificate? > > > I'm very surprised nobody seems to have seen this. > > I have googled quite a lot and asked Fedora and Evolution lists. > > If Exim stops advertising TLS after an update then bugzilla.redhat.com > would be the most appropriate way to deal with that. > Hi Many thanks for your reply Total ignorance on my behalf! I was misled into thinking that the older versions of evolution to exim were using TLS when I selected it from within evolution when they must have been falling back to clear text mode? The later version of evolution presumably does not fall back? In any event exim has never been configured to use TLS ! Having set the following in /etc/exim/exim.conf and generating the cert file #ja_hack tls_advertise_hosts = 148.197.29.3/32 tls_certificate = /etc/exim/cert tls_privatekey = /etc/exim/cert all works OK ethereal/wireshark shows the communication between evolution and exim which is now advertising STARTTLS and the exchanges are now encrypted. Regards John ___ Evolution-list mailing list Evolution-list@gnome.org http://mail.gnome.org/mailman/listinfo/evolution-list
Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported
On Fri, 2006-11-03 at 10:11 +, John Austin wrote: > ehlo avon > 250-maui.jaa.org.uk Hello avon [148.197.29.3] > 250-SIZE 52428800 > 250-PIPELINING > 250 HELP Your server isn't advertising STARTTLS -- ignore the HELP; it should be in the EHLO response. Find out why -- is hosts_advertise_tls set correctly to '*'? Can Exim find its TLS certificate? > I'm very surprised nobody seems to have seen this. > I have googled quite a lot and asked Fedora and Evolution lists. If Exim stops advertising TLS after an update then bugzilla.redhat.com would be the most appropriate way to deal with that. -- dwmw2 ___ Evolution-list mailing list Evolution-list@gnome.org http://mail.gnome.org/mailman/listinfo/evolution-list
Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported
On Fri, 2006-11-03 at 01:41 +0100, Andre Klapper wrote: > hi, > > Am Donnerstag, den 02.11.2006, 16:34 + schrieb John Austin: > > "Error while performing operation." > > > > "Failed to connect to SMTP server 148.197.29.5 in secure mode: > > STARTTLS not supported" > > please make sure that you have not set evolution to use TLS > ("Edit>Preferences>Mail Accounts>Edit>Security"), if your mail server > does not support it. :-) > > > Evolution now fails with the same error as FC6 ! > > hmm, looks like your exclamation mark key is broken. > > cheers, > andre > > ___ > Evolution-list mailing list > Evolution-list@gnome.org > http://mail.gnome.org/mailman/listinfo/evolution-list Hi Many thanks for the reply TLS is selected in evolution and exim definitely does support it. Selecting SSL gives Connection Refused Selecting No Encryption works OK 1. FC5 evolution works perfectly using TLS to exim before upgrading from evolution-2.6.0-1.i386 to 2.6.3-1.fc5.5 2. I have also tried the following telnet connection and exim mentions STARTTLS ### avon.jaa.org.uk ~ 1000# telnet maui 25 Trying 148.197.29.5... Connected to maui.jaa.org.uk (148.197.29.5). Escape character is '^]'. 220 maui.jaa.org.uk ESMTP Exim 4.62 Fri, 03 Nov 2006 09:00:33 + ehlo avon 250-maui.jaa.org.uk Hello avon [148.197.29.3] 250-SIZE 52428800 250-PIPELINING 250 HELP HELP 214-Commands supported: 214 AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP QUIT 221 maui.jaa.org.uk closing connection Connection closed by foreign host. avon.jaa.org.uk ~ 1001# Are there any suitable commands I can enter to test things further using telnet? I'm very surprised nobody seems to have seen this. I have googled quite a lot and asked Fedora and Evolution lists. However I am certainly not a mailer expert ! Cheers John ___ Evolution-list mailing list Evolution-list@gnome.org http://mail.gnome.org/mailman/listinfo/evolution-list
Re: [Evolution] FC6 (and FC5 updated) Evolution to Exim STARTTLS not supported
hi, Am Donnerstag, den 02.11.2006, 16:34 + schrieb John Austin: > "Error while performing operation." > > "Failed to connect to SMTP server 148.197.29.5 in secure mode: > STARTTLS not supported" please make sure that you have not set evolution to use TLS ("Edit>Preferences>Mail Accounts>Edit>Security"), if your mail server does not support it. :-) > Evolution now fails with the same error as FC6 ! hmm, looks like your exclamation mark key is broken. cheers, andre -- mailto:[EMAIL PROTECTED] | failed! http://www.iomc.de signature.asc Description: Dies ist ein digital signierter Nachrichtenteil ___ Evolution-list mailing list Evolution-list@gnome.org http://mail.gnome.org/mailman/listinfo/evolution-list