Subject: SSL + no STARTTLS + Remote address book fails

From: Chris Wilson <[email-masked]>
Date: Fri, 9 Jan 2004 11:14:28 +0000 (GMT)

Hi all,

Sorry if this has been asked before, I spent some time searching and 
couldn't find anything except:

  [http://www.washington.edu/pine/pine-info/2003.11/msg00052.html]

which doesn't seem to be that relevant (I think Steve Hubert was saying 
that his remote address book *does* work).

I had Pine working very well with Cyrus imapd and SSL until a few weeks 
ago, when we upgraded our mail server. Afterwards, Pine began to complain 
that "SSL negotiation failed" on startup, which I'm given to understand 
is a generic SSL error.

Strace shows that Pine tries to use STARTTLS, and exchanges some binary 
data with the server, before giving this error.

I was able to mostly fix this by disabling TLS (/notls option). Pine then
starts, reads its configuration and reads and writes to normal folders 
and the configuration file without problems (but insecurely).

However, my address book is now read-only. Every time I try to add to it, 
I get the above error. I can't figure out why Pine treats the address book 
differently to the configuration.

I tried to bypass STARTTLS by adding /ssl to the command-line preferences 
path and my folder paths, instead of /notls. Pine now starts much faster, 
but gives the same error when adding to the address book.

I'm afraid my Pine isn't compiled for debugging, so I can't easily give 
you debug output.

Please let me know if you have any ideas about how to fix this, as 
otherwise I may have to go back to local preferences and address books 
(and I'm not even sure how to transfer my address book back to the local 
machine).

Cheers, Chris.
-- 
_  __ __     _
 / __/ / ,__(_)_  | Chris Wilson -- UNIX Firewall Lead Developer |
/ (_  ,\/ _/ /_ \ | NetServers.co.uk http://www.netservers.co.uk |
\__/_/_/_//_/___/ | 21 Signet Court, Cambridge, UK. 01223 576516 |

-- 
-----------------------------------------------------------------
 For information about this mailing list, and its archives, see: 
 http://www.washington.edu/pine/pine-info/
-----------------------------------------------------------------

---

From: Steve Hubert <[email-masked]>
Date: Fri, 9 Jan 2004 13:52:39 -0800 (PST)

Sounds like /notls worked for you on your inbox. Did you try that on the
address book definition? Go to Setup/Address Books, then "Change" the
remote address book. It may look like

Server Name  : server
Folder...

Try appending /notls to the server name.

Steve Hubert <[email-masked]>
Networks and Distributed Computing, Univ. of Washington, Seattle

---

From: Matt Ackeret <[email-masked]>
Date: Fri, 9 Jan 2004 15:40:33 -0800 (PST)

>remote address book. It may look like

Since I still get these SSL errors, for me it doesn't seem like /notls works
for me..  Is there some other workaround?

Sorry, this just brings up the old topic I've never gotten an answer to..
(and I don't really want to modify the source to just ignore that error.)

I also often get errors about it being unable to reopen postponed-msgs, so I
have to try compose again a few times to continue writing a postponened
message.  Any workarounds for this would solve both of the major probs
I have with pine..

(A third is that my server apparently now puts /s on the ends of folder
names, and I have to manually delete them if I try tab-completing..
This is probably worth a pine patch with a new "Strip / from folder names when
tab completing" option..)   Though I admit I don't know the underlying
reason for any of these problems.

---

From: Chris Wilson <[email-masked]>
Date: Sat, 10 Jan 2004 01:48:05 +0000 (GMT)

Hi Simon,

> Try appending /notls to the server name.

OK, I didn't know about Setup/Address Books. Appending /ssl fixed it
(presumably /notls would have worked as well). Thanks very much for the
prompt response, and sorry for asking such an obvious question.

Cheers, Chris.