Re: SSL version on Claws W32

On Sun, 4 May 2003 01:53:59 +0200 Thorsten Maerz (TM) wrote:

> > I have problem when connect to POP/SMTP using TLS protocol (no
> > problem for SSL connection) while have no problem when using linux
> > claws (I am using OpenSSL 0.9.7 on my linux box).
> 
> I upgraded to OpenSSL-0.9.7b (new DLL packs are available) and found
> a problem in the Sylpheed code too (new unstable build).

ouch :-(

 
> Can you find out if the problem was caused by the old OpenSSL
> version or by Sylpheed?

Perhaps both, not sure though so I need further investigation.
The server currently support sslv3 while maintaining ssl2 compatibility.
When I used ssl connection (use specific port), I have no problem either
POP or SMTP connection, the problem arise when I used TLS.

Below quoting from mail server developer :

--- begin quote ---

I have figured it out (for real) this time.  With STARTTLS, Sylpheed
Claws is sending MDaemon a TLS 1.0 ClientHello message but specifies the
cipher suites in SSL 2.0 format.  MDaemon does not support this.  If the
whole ClientHello message was in SSL 2.0 format, MDaemon would support
it.  That is what it's doing for the direct SSL connections, and they do
work.  I think this is a bug in how Sylpheed Claws is supporting
STARTTLS.

--- end of quote ---

using openssl 0.9.7 doesn't make problem because it use ssl v3.

> If the problem persists, can you send me the output from running
>   sylpheed_d > sylpheed.dmp
> !!! clear your PASSWORDS from that file !!!

I will do next Monday while in office.
 
> The new builds (claws140-1) are available in
>   http://claws-w32.sourceforge.net/sylpheed/claws/unstable/
> 
> DLL packs (030503) are available at http://claws-w32.sf.net .

Thanks.

-- 
syafril
-------
Syafril Hermansyah<syafril-at-dutaint.co.id>


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf