Re: Problems sending mail with ssl on port 465

[Adam Sjøgren]

On Mon, 14 Jun 2010 14:51:36 +0200, Torben wrote:

> I tried to install gnutls-cli but then I had other problems.  Should I
> install gnutls-cli or something else?

What problems did you have installing gnutls on Ubuntu? It should be as
easy as installing the "gnutls-bin" package:

 * http://packages.ubuntu.com/gnutls-bin

An simple first test is to see if you can connect with gnutls-bin on the
command-line and get an answer from the server, i.e. go something like
(change hostname accordingly; I wrote the EHLO-line and QUIT):

  $ gnutls-cli --port 465 mail.koldfront.dk
  Resolving 'mail.koldfront.dk'...
  Connecting to '95.166.24.143:465'...
  - Ephemeral Diffie-Hellman parameters
   - Using prime: 1024 bits
   - Secret key: 1019 bits
   - Peer's public key: 1022 bits
  - Certificate type: X.509
   - Got a certificate list of 2 certificates.
   - Certificate[0] info:
    - subject `C=DK,ST=Copenhagen,O=koldfront,OU=Mail 
delivery,CN=mail.koldfront.dk', issuer `O=koldfront,OU=Self signing 
authority,EMAIL=asjo@koldfront.dk,L=Copenhagen,ST=Copenhagen,C=DK,CN=koldfront.dk',
 RSA key 1024 bits, signed using RSA-MD5 (broken!), activated `2008-06-06 
20:37:46 UTC', expires `2018-06-04 20:37:46 UTC', SHA-1 fingerprint 
`3d4c8fe730d56684b04bf47ec7d0ea62b20097f9'
   - Certificate[1] info:
    - subject `O=koldfront,OU=Self signing 
authority,EMAIL=asjo@koldfront.dk,L=Copenhagen,ST=Copenhagen,C=DK,CN=koldfront.dk',
 issuer `O=koldfront,OU=Self signing 
authority,EMAIL=asjo@koldfront.dk,L=Copenhagen,ST=Copenhagen,C=DK,CN=koldfront.dk',
 RSA key 1024 bits, signed using RSA-MD5 (broken!), activated `2008-06-06 
20:31:33 UTC', expires `2018-06-04 20:31:33 UTC', SHA-1 fingerprint 
`23f84365849978864d6e420b23131b33a7360249'
  - The hostname in the certificate matches 'mail.koldfront.dk'.
  - Peer's certificate issuer is unknown
  - Peer's certificate is NOT trusted
  - Version: TLS1.0
  - Key Exchange: DHE-RSA
  - Cipher: AES-128-CBC
  - MAC: SHA1
  - Compression: NULL
  - Handshake was completed

  - Simple Client Mode:

  220 virgil.koldfront.dk ESMTP Postfix (Debian/GNU)
  EHLO topper.koldfront.dk
  250-virgil.koldfront.dk
  250-PIPELINING
  250-SIZE 209715200
  250-ETRN
  250-AUTH LOGIN PLAIN
  250-ENHANCEDSTATUSCODES
  250-8BITMIME
  250 DSN
  QUIT
  221 2.0.0 Bye


  Best regards,

    Adam

-- 
 "My internal clock is on Tokyo time."                        Adam Sjøgren
                                                         asjo@koldfront.dk