Re: Is anyone else is seeing a problem with Gmail ’s IMAP service when using "openssl s_client"?

--pgp-sign-Multipart_Mon_May__6_14:45:36_2019-1
Content-Type: text/plain; charset=ISO-2022-JP

At Fri, 03 May 2019 13:03:01 -0700, "Greg A. Woods" <[email protected]> wrote:
Subject: Is anyone else is seeing a problem with Gmail$B!G(Bs IMAP service when using "openssl s_client"?
>
> My WL connection attempts to Gmail started hanging a few days ago (watch
> cursor, interrupts with ^G just leave the process buffer but there's no
> password prompt), and manual tests were sticking at the IMAP $B!H(B* OK$B!I(B
> prompt.  No further response was received from gmail.
>
> Yesterday after a few reconnects it would work.  Today it won$B!G(Bt work for
> me from any of at least three source IP address I$B!G(Bve tried, two widely
> separated in North America, and another in Europe.

OK, this is extremely weird, and somewhat troubling.

Turns out the "hang" was, once again (i.e. I've seen this before) due to
`open-tls-stream' trying to find the `tls-end-of-info' pattern in the
output from "openssl s_client".

What's weird this time is that the change was due to something changing
in the remote server.  I haven't changed my local OpenSSL binary since
Feb. 3, and this problem only affected connections to Gmail (while my
connections to my own Cyrus IMAPd remained fully functional).  The last
time this happened everything ground to a halt for all servers, and that
was after I upgraded my local OS and a new version of OpenSSL was
installed.

Unfortunately it seems `open-tls-stream' is extremely fragile and
rather difficult to debug, even when one remembers how to find out where
the hang is and to look at the buffer containing the process output.

For the record I'm now successfully connecting with:

      (setq tls-end-of-info
   "\\(^\s*Verify return code: .+
---
\\|^    Extended master secret: .+
---
\\|^- Simple Client Mode:
\\(
\\|^\\*\\*\\* Starting TLS handshake
\\)*\\)")

--
					Greg A. Woods <[email protected]>

+1 250 762-7675                           RoboHack <[email protected]>
Planix, Inc. <[email protected]>     Avoncote Farms <[email protected]>

--pgp-sign-Multipart_Mon_May__6_14:45:36_2019-1
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit
Content-Description: OpenPGP Digital Signature

-----BEGIN PGP SIGNATURE-----

iF0EABECAB0WIQRuK6dmwVAucmRxuh9mfXG3eL/0fwUCXNCrAwAKCRBmfXG3eL/0
f/EmAJ9N/vZOfCz94KfLM9QJCLu5Cdsz0gCeJ1xdM/b2EOhYBRJGZ8u7urcfJAg=
=PZxU
-----END PGP SIGNATURE-----

--pgp-sign-Multipart_Mon_May__6_14:45:36_2019-1--