Re: Timing out while trying to connect to gmail. Config?

On 26/02/2019 10:52, Daniel Kahn Gillmor wrote:
> On Mon 2019-02-25 08:57:15 -0600, Charles Cazabon wrote:
>> I should have also said:
>>
>>>>> server = imap.gmail.com
>>
>> You could also try:
>>
>>      telnet imap.gmail.com 993
>>
>> If you don't more-or-less immediately see "Connected to <gmail-domain-name>",
>> then the problem is that you've been blocked/firewalled off, either at your
>> end or at Gmail's.
> 
> The simple command-line test i'd expect to work is:
> 
>    (echo 'A CAPABILITY' && sleep 2) | gnutls-cli --crlf imap.gmail.com:993
> 
> If it works, you should see TLS connection information, followed by:
> 
>      - Simple Client Mode:
> 
> followed by something like:
> 
>      * OK Gimap ready for requests from 38.109.115.130 l1mb154081195vke
>      * CAPABILITY IMAP4rev1 UNSELECT IDLE NAMESPACE QUOTA ID XLIST CHILDREN X-GM-EXT-1 XYZZY SASL-IR AUTH=XOAUTH2 AUTH=PLAIN AUTH=PLAIN-CLIENTTOKEN AUTH=OAUTHBEARER AUTH=XOAUTH
>      A OK Thats all she wrote! l1mb154081195vke
> 
> 
> fwiw, this works fine for me right now, so i suspect the OP saw
> something transient (or is experiencing a network blockage)
> 
Didn't appear to work for me, maybe this is the OP's problem:

$ (echo 'A CAPABILITY' && sleep 2) | gnutls-cli --crlf imap.gmail.com:993
Error setting the x509 trust file
Resolving 'imap.gmail.com:993'...
Connecting to '74.125.68.108:993'...
- Certificate type: X.509
- Got a certificate list of 2 certificates.
- Certificate[0] info:
  - subject `CN=imap.gmail.com,O=Google LLC,L=Mountain 
View,ST=California,C=US', issuer `CN=Google Internet Authority 
G3,O=Google Trust Services,C=US', serial 0x43f0108801a59846, RSA key 
2048 bits, signed using RSA-SHA256, activated `2019-01-29 14:59:34 UTC', 
expires `2019-04-23 14:59:00 UTC', 
pin-sha256="jybzA8WnUHxyKdRByYMbUoML2np36aMimGtBZreXhLk="
         Public Key ID:
                 sha1:3c767f63376e8c6e542d5f551786ca0b7e733b90
 
sha256:8f26f303c5a7507c7229d441c9831b52830bda7a77e9a322986b4166b79784b9
         Public Key PIN:
                 pin-sha256:jybzA8WnUHxyKdRByYMbUoML2np36aMimGtBZreXhLk=
         Public key's random art:
                 +--[ RSA 2048]----+
                 |              .o=|
                 |             .. o|
                 |          . .   o|
                 |       . . o  ..o|
                 |        S o o .o.|
                 |       . + E o  .|
                 |          . * B..|
                 |             B.=.|
                 |            o.o. |
                 +-----------------+

- Certificate[1] info:
  - subject `CN=Google Internet Authority G3,O=Google Trust 
Services,C=US', issuer `CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA 
- R2', serial 0x01e3a9301cfc7206383f9a531d, RSA key 2048 bits, signed 
using RSA-SHA256, activated `2017-06-15 00:00:42 UTC', expires 
`2021-12-15 00:00:42 UTC', 
pin-sha256="f8NnEFZxQ4ExFOhSN7EiFWtiudZQVD2oY60uauV/n78="
- Status: The certificate is NOT trusted. The certificate issuer is 
unknown.
*** PKI verification of server certificate failed...
*** Fatal error: Error in the certificate.


I also tried Charles' test:

$ telnet imap.gmail.com 993
Trying 74.125.24.109...
Connected to gmail-imap.l.google.com.
Escape character is '^]'.
Connection to gmail-imap.l.google.com closed by foreign host.

It's times like these I'm glad I don't rely on google.


	Cheers,
		Gary	B-)