Active Topics
-
Firefox with Leste (10)
to Maemo 7 / Leste by teroyk - 2 days, 19 hrs ago - more...
| The Following User Says Thank You to Malakai For This Useful Post: | ||
|
2014-10-29
, 20:32
|
|
Posts: 203 |
Thanked: 445 times |
Joined on Mar 2010
|
#22
|
try
and
(on one line, repsectively)
Code:
openssl s_client -connect imap.domain.net:143 -starttls imap -tls1
Code:
openssl s_client -connect smtp.domain.net:25 -starttls smtp -tls1
| The Following 4 Users Say Thank You to foobar For This Useful Post: | ||
|
|
2014-10-30
, 06:55
|
|
Posts: 175 |
Thanked: 210 times |
Joined on Mar 2013
|
#23
|
When I try the first command with hosting24.hostway.net as address I get a bunch of text with:
The second command with hosting24.hostway.net gives me:
And if I try the commands with mydomain.net as address I get the same responses as before, knowing that for mydomain.net I don't have any certificates installed.
Is it possible that my provider made a link between my domain and the domain of the server so the certificate would be on both domains?
I also tried the commands with the specified ports for the SSL/TLS configuration and in all cases I get the same text between BEGIN CERTIFICATE and END CERTIFICATE. No matter what the domain is (mydomain.net or hosting24.hostway.net) if I use the appropriate ports and appropriate protocol (-ssl3 or -tls1) for each domain I get the same certificate.
From what I understand of all this, my connection is secured the same way if I use:
- "SSL" with the address hosting24.hostway.net with ports 993 for imap and 465 for smtp (the old way that doesn't work anymore)
or
- "Normale (TLS)" with mydomain.net or hosting24.hostway.net with ports 143 for imap and 587 for smtp (the new way that works).
Is it correct?
Last edited by Malakai; 2014-10-30 at 06:59.
Code:
Server certificate
-----BEGIN CERTIFICATE-----
....
-----END CERTIFICATE-----
No client certificate CA names sent
---
SSL handshake has read 4779 bytes and written 318 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : DHE-RSA-AES256-SHA
Session-ID: ..........
Start Time: 1414650437
Timeout : 7200 (sec)
Verify return code: 19 (self signed certificate in certificate chain)
---
. OK Pre-login capabilities listed, post-login capabilities have more.
Code:
Server certificate
-----BEGIN CERTIFICATE-----
....
-----END CERTIFICATE-----
No client certificate CA names sent
---
SSL handshake has read 5304 bytes and written 455 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : DHE-RSA-AES256-SHA
Session-ID: .....
Start Time: 1414650651
Timeout : 7200 (sec)
Verify return code: 19 (self signed certificate in certificate chain)
Is it possible that my provider made a link between my domain and the domain of the server so the certificate would be on both domains?
I also tried the commands with the specified ports for the SSL/TLS configuration and in all cases I get the same text between BEGIN CERTIFICATE and END CERTIFICATE. No matter what the domain is (mydomain.net or hosting24.hostway.net) if I use the appropriate ports and appropriate protocol (-ssl3 or -tls1) for each domain I get the same certificate.
From what I understand of all this, my connection is secured the same way if I use:
- "SSL" with the address hosting24.hostway.net with ports 993 for imap and 465 for smtp (the old way that doesn't work anymore)
or
- "Normale (TLS)" with mydomain.net or hosting24.hostway.net with ports 143 for imap and 587 for smtp (the new way that works).
Is it correct?
Last edited by Malakai; 2014-10-30 at 06:59.
| The Following User Says Thank You to Malakai For This Useful Post: | ||
|
|
2014-10-30
, 10:22
|
|
Posts: 1,808 |
Thanked: 4,272 times |
Joined on Feb 2011
@ Germany
|
#24
|
@Malakai,
Read https://www.fastmail.fm/help/technic...sstarttls.html for a very good introduction.
The question is whether Modest is enforcing TLS (or SSL) when connecting to the unsecured port (143). You either trust that it does, check the source code and trust that it does it correctly, or capture the traffic and check it (and trust that it does it correctly
.
Read https://www.fastmail.fm/help/technic...sstarttls.html for a very good introduction.
The question is whether Modest is enforcing TLS (or SSL) when connecting to the unsecured port (143). You either trust that it does, check the source code and trust that it does it correctly, or capture the traffic and check it (and trust that it does it correctly
.
| The Following 4 Users Say Thank You to reinob For This Useful Post: | ||
|
|
2014-10-30
, 11:05
|
|
Posts: 203 |
Thanked: 445 times |
Joined on Mar 2010
|
#25
|
From a first (shallow) dive into the code it seems like modest indeed wants to enforce STARTTLS if "Normal (TLS)" is selected.
Also, when creating a new account in modest, one can chose a port number other than 143 for "Normal (TLS)". Once the account is active, changing the port is no longer possible, apparently.
Also, when creating a new account in modest, one can chose a port number other than 143 for "Normal (TLS)". Once the account is active, changing the port is no longer possible, apparently.
| The Following 5 Users Say Thank You to foobar For This Useful Post: | ||
|
|
2014-10-30
, 19:30
|
|
Posts: 175 |
Thanked: 210 times |
Joined on Mar 2013
|
#26
|
You either trust that it does, check the source code and trust that it does it correctly, or capture the traffic and check it (and trust that it does it correctly .
From a first (shallow) dive into the code it seems like modest indeed wants to enforce STARTTLS if "Normal (TLS)" is selected.
Also, when creating a new account in modest, one can chose a port number other than 143 for "Normal (TLS)". Once the account is active, changing the port is no longer possible, apparently.
I think it's time for me to donate to neo900 project as everyday something else "changes" on the n900 and doesn't work as it should.... just hope that the same issues won't appear with the neo900.
Thank you for your help and for your explanations.
| The Following User Says Thank You to Malakai For This Useful Post: | ||
 |
|
2014-10-30
, 20:28
|
|
Posts: 4,118 |
Thanked: 8,901 times |
Joined on Aug 2010
@ Ruhrgebiet, Germany
|
#27
|
@malakai
Do you mind I take over this thread?
Would you then please re-edit first post a d set it to [NOT yet solved].
My provider does not offer STARTTLS, neither on 993 or 143 nor on any other (but they do for smtp on 587
). So it seems I cannot receive mails from that account on N900 anymore.
Thanks to one of the biggest telco providers (t-online.de).
Neo might have same prob (in case of using freEmantle). So we could just beg and hope freemangordon might find some time later on.
Last edited by peterleinchen; 2014-10-30 at 21:23.
Do you mind I take over this thread?
Would you then please re-edit first post a d set it to [NOT yet solved].
My provider does not offer STARTTLS, neither on 993 or 143 nor on any other (but they do for smtp on 587
). So it seems I cannot receive mails from that account on N900 anymore. Thanks to one of the biggest telco providers (t-online.de).
Neo might have same prob (in case of using freEmantle). So we could just beg and hope freemangordon might find some time later on.
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!
Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257
editsignature, http://talk.maemo.org/profile.php?do=editsignature
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!
Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257
editsignature, http://talk.maemo.org/profile.php?do=editsignature
Last edited by peterleinchen; 2014-10-30 at 21:23.
|
|
2014-10-30
, 20:34
|
|
Posts: 4,118 |
Thanked: 8,901 times |
Joined on Aug 2010
@ Ruhrgebiet, Germany
|
#28
|
Originally Posted by foobar
Yep, true.
Also, when creating a new account in modest, one can chose a port number other than 143 for "Normal (TLS)". Once the account is active, changing the port is no longer possible, apparently.
You might change it later on via gconftool. But it is easier/better to delete and recreate as changing params via gconftool will not delete cached inboxes under /home/user/.modest and you have to do that also manually. Time consuming
, but fun
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!
Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257
editsignature, http://talk.maemo.org/profile.php?do=editsignature
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!
Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257
editsignature, http://talk.maemo.org/profile.php?do=editsignature
| The Following User Says Thank You to peterleinchen For This Useful Post: | ||
|
|
2014-10-30
, 20:54
|
|
Posts: 203 |
Thanked: 445 times |
Joined on Mar 2010
|
#29
|
Originally Posted by peterleinchen
So the problem is that they require TLS for IMAP4S, and modest doesn't speak that?
My provider does not offer STARTTLS, neither on 993 or 143 nor on any other. So it seems I cannot receive mails from that account on N900 anymore.
Thanks to one of the biggest telco providers (t-online.de).
Neo might have same prob (in case of using freEmantle). So we could just beg and hope freemangordon might find some time later on.
| The Following 3 Users Say Thank You to foobar For This Useful Post: | ||
|
|
2014-10-30
, 21:07
|
|
Posts: 4,118 |
Thanked: 8,901 times |
Joined on Aug 2010
@ Ruhrgebiet, Germany
|
#30
|
Originally Posted by foobar
Think so.
So the problem is that they require TLS for IMAP4S, and modest doesn't speak that?
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!
Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257
editsignature, http://talk.maemo.org/profile.php?do=editsignature
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!
Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257
editsignature, http://talk.maemo.org/profile.php?do=editsignature
| The Following User Says Thank You to peterleinchen For This Useful Post: | ||
 |
| Tags |
| email, modest, send receive |
«
Previous Thread
|
Next Thread
»
|
All times are GMT. The time now is 07:34.
So, I tried with the following settings:
- hosting24.hostway.net for both smtp and imap
- IMAP Port 143 and SMTP Port 587
- Normale (TLS) for both smtp and imap
- Secure Authentication ticked
It works for receiving and sending mails on all 3 accounts BUT, how can I be sure that the connection is set securely, as Modest uses the ports that my provider indicates for non SSL/TLS? I just want to be sure that everything is encrypted.
Is there a command line to execute directly in N900 to get this information as I'm not very familiar to network sniffing tools?