Active Topics

 


Reply
Thread Tools
peterleinchen's Avatar
Posts: 4,118 | Thanked: 8,901 times | Joined on Aug 2010 @ Ruhrgebiet, Germany
#41
Confirming the working state!

Just one question to foobar/arcean: the deb size and also the lib sizes differ in the file posted above and the one from cssu-repo.
Any idea/explanation?
I took the one from official cssu repo.

For non-CSSU users: please do not try to install the cssu deb package, it may cause serious problems. If needed I may prepare a workaround like here.

--
but now I again need to reset all my accounts from
IMAP on STARTTLS [setting: Normal (TLS)] -which I just did- back to
IMAP on SSL/TLS [setting: SSL]
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!

Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257

editsignature, http://talk.maemo.org/profile.php?do=editsignature

Last edited by peterleinchen; 2014-11-02 at 21:33. Reason: adding reset info ;)
 

The Following 5 Users Say Thank You to peterleinchen For This Useful Post:
Posts: 220 | Thanked: 1,260 times | Joined on Apr 2010 @ Poland
#42
Originally Posted by peterleinchen View Post
Just one question to foobar/arcean: the deb size and also the lib sizes differ in the file posted above and the one from cssu-repo.
Any idea/explanation?
I took the one from official cssu repo.
Maybe thumb-related problem in scratchbox?
More about issue: http://maemo.org/community/maemo-use..._installation/
__________________
Gnumeric - a spreadsheet application for N900
Camdrive transforms your N9 into a car black box
CSSU developer, join us!
 

The Following 5 Users Say Thank You to arcean For This Useful Post:
Posts: 175 | Thanked: 210 times | Joined on Mar 2013
#43
Hello,

Just changed the title of the thread to "[SOLVED] Modest cannot receive/send via SSL/TLS" as suggested by peterleinchen.

But frankly I don't know how to get the fix.... I mean is it in the repos or will it be?
 

The Following 5 Users Say Thank You to Malakai For This Useful Post:
peterleinchen's Avatar
Posts: 4,118 | Thanked: 8,901 times | Joined on Aug 2010 @ Ruhrgebiet, Germany
#44
It depends!
Whether you are on CSSU or not.

If on CSSU then just grab this deb (or later versions) and download it to MyDocs. Then get root and execute following command:
Code:
dpkg -i /home/user/MyDocs/libtinymail*
killall modest
Done.

If not on CSSU (but running stock PR1.3[.1]) then use the attached tar.gz, download to MyDocs and execute following commands (just like here):
Code:
sudo gainroot
cd /
tar xvzf /home/user/MyDocs/libtinymail-camel.tar.gz
tar xvzf /home/user/MyDocs/libtinymail-camel-lite.tar.gz
killall modest

All credits to foobar!
Attached Files
File Type: gz libtinymail-camel.tar.gz (400.9 KB, 161 views)
File Type: gz libtinymail-camel-lite.tar.gz (173.3 KB, 154 views)
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!

Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257

editsignature, http://talk.maemo.org/profile.php?do=editsignature

Last edited by peterleinchen; 2014-11-06 at 23:13. Reason: added tar.gz
 

The Following 8 Users Say Thank You to peterleinchen For This Useful Post:
Amboss's Avatar
Posts: 237 | Thanked: 502 times | Joined on May 2010 @ Mittelfranken, Germany
#45
Just some thoughts:

Since both SSL2 and SSL3 are insecure (if not obsolete) what would it take to disable them altogether. With the proposed fix it is made to work, but it leaves some questions.

For instance, if the provider offers both SSLv3 and TLS which one will be choosen. The first in the list or the best? Does it matter if it reads

#define SSL_FLAGS (CAMEL_TCP_STREAM_SSL_ENABLE_SSL2 | CAMEL_TCP_STREAM_SSL_ENABLE_SSL3 | CAMEL_TCP_STREAM_SSL_ENABLE_TLS)

or

#define SSL_FLAGS (CAMEL_TCP_STREAM_SSL_ENABLE_TLS | CAMEL_TCP_STREAM_SSL_ENABLE_SSL2 | CAMEL_TCP_STREAM_SSL_ENABLE_SSL3)

??
 

The Following User Says Thank You to Amboss For This Useful Post:
Posts: 203 | Thanked: 445 times | Joined on Mar 2010
#46
The best will be chosen if things are not completely fubar'd inside NSS (the crypto lib tinymail uses).

The order in the #define doesn't matter.
Disabling SSL3 now would lock a lot of people out of their mail servers again, so while it would be beneficial from a security point of view, it would not help with the problem at hand.
 

The Following 4 Users Say Thank You to foobar For This Useful Post:
peterleinchen's Avatar
Posts: 4,118 | Thanked: 8,901 times | Joined on Aug 2010 @ Ruhrgebiet, Germany
#47
See also:
Originally Posted by reinob View Post
I hope it tries TLS first (1.2, 1.1, 1.0) *and then* SSL.
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!

Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257

editsignature, http://talk.maemo.org/profile.php?do=editsignature
 

The Following 3 Users Say Thank You to peterleinchen For This Useful Post:
Posts: 1,808 | Thanked: 4,272 times | Joined on Feb 2011 @ Germany
#48
Originally Posted by Amboss View Post
Does it matter if it reads

#define SSL_FLAGS (CAMEL_TCP_STREAM_SSL_ENABLE_SSL2 | CAMEL_TCP_STREAM_SSL_ENABLE_SSL3 | CAMEL_TCP_STREAM_SSL_ENABLE_TLS)

or

#define SSL_FLAGS (CAMEL_TCP_STREAM_SSL_ENABLE_TLS | CAMEL_TCP_STREAM_SSL_ENABLE_SSL2 | CAMEL_TCP_STREAM_SSL_ENABLE_SSL3)

??
Don't they teach math at school anymore?
Repeat after me: addition is commutative!

-- add.
As @peterleinchen rightly pointed out, ORing is not really ADDing (that would be XORing). However for cases where the things being added do not overlap (in the binary sense of the word), ORing is, for all purposes, the same as ADDing.

So for the sake of completeness:
Repeat after me: disjunction is commutative!

(I know, it sounds much much worse.)

Last edited by reinob; 2014-11-04 at 09:53.
 

The Following 5 Users Say Thank You to reinob For This Useful Post:
Posts: 21 | Thanked: 19 times | Joined on Oct 2011 @ Germany/Siegen
#49
I'm using CSSU but not the devel repository. So I do not have libglib2.0-0 (>= 2.24.0). And I do not want to install the files manually via tar.gz.

Because the files in the tar.gz by peterleinchen are the same as in the CSSU devel package, I simply modified the deb to depend on libglib2.0-0 (>= 2.20.0). For me it works.

I cannot add the modified deb here because I am not allowed to attach files > 488 kB. And the deb is > 600 kB.

I uploaded it there:
http://packages.der-he.de/austausch/...ssu7_armel.deb

It should work for all CSSU and PR1.3(.1) users.
 

The Following 3 Users Say Thank You to hede For This Useful Post:
Amboss's Avatar
Posts: 237 | Thanked: 502 times | Joined on May 2010 @ Mittelfranken, Germany
#50
Originally Posted by reinob View Post
Don't they teach math at school anymore?
Repeat after me: addition is commutative!
...
Repeat after me: disjunction is commutative!

(I know, it sounds much much worse.)
Just for restoring my reputation:
I know those rules already and I know how to apply them

A computer might implement checking the conditions in a different way though.
It might check all conditions for truth and state the result afterwards.
Or it might be implemented to do something like an IF-ELSEIF-ELSE chain would do, meaning if it hits first it sticks to it. Why should a computer test more than one condition if the "true"-outcome has already been reached?

I have seen such implementations before. This of course saves CPU cycles noticably only for large numbers of repetitions. It all depends on the implementation of the checking routine.

And this I have learned AFTER school in university lectures about algorithms and data structures )
 

The Following 2 Users Say Thank You to Amboss For This Useful Post:
Reply

Tags
email, modest, send receive


 
Forum Jump


All times are GMT. The time now is 22:12.