Devuan logs - #880, boring messages

Message sent to devuan-bugs@lists.dyne.org, devuan-dev@lists.dyne.org:

Subject: bug#880: libnet-imap-simple-ssl-perl: IMAP SSL connection not possible
Reply-To: markus schnalke <meillo@marmaro.de>, 880@bugs.devuan.org
Resent-From: markus schnalke <meillo@marmaro.de>
Resent-To: devuan-bugs@lists.dyne.org
Resent-CC: devuan-dev@lists.dyne.org
Resent-Date: Tue, 18 Mar 2025 16:08:01 +0000
Resent-Message-ID: <handler.880.B.174231396316075@bugs.devuan.org>
Resent-Sender: owner@bugs.devuan.org
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=91.107.236.106; helo=marmaro.de; envelope-from=meillo@marmaro.de; receiver=<UNKNOWN> 
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: markus schnalke <meillo@marmaro.de>
To: Devuan Bug Tracking System <submit@bugs.devuan.org>
Message-ID: <174231375827.29923.16609018463711557623.reportbug@marmaro.de>
Date: Tue, 18 Mar 2025 17:02:38 +0100

Package: libnet-imap-simple-ssl-perl
Version: 1.3-5
Severity: normal

Hoi.

I am unable to establish a connection with IMAP servers:

	:-F cat /tmp/imap-connect-test.pl                   
	#!/usr/bin/perl
	 
	use Net::IMAP::Simple::SSL; 
	 
	Net::IMAP::Simple::SSL->new("imap.gmx.net:993", ssl_version=>"TLSv1") 
		or die("cannot connect to server\n"); 


	:-F perl /tmp/imap-connect-test.pl                  
	cannot connect to server


However, with Openssl I can:

	:-F openssl s_client -quiet -connect imap.gmx.net:993
	depth=2 C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 2
	verify return:1
	depth=1 C = DE, O = Deutsche Telekom Security GmbH, CN = Telekom Security ServerID OV Class 2 CA
	verify return:1
	depth=0 C = DE, ST = Rheinland-Pfalz, L = Montabaur, O = 1&1 Mail & Media GmbH, CN = mail.gmx.net
	verify return:1
	* OK [CAPABILITY IMAP4rev1 CHILDREN ENABLE ID IDLE LIST-EXTENDED LIST-STATUS LITERAL- MOVE NAMESPACE SASL-IR SORT SPECIAL-USE THREAD=ORDEREDSUBJECT UIDPLUS UNSELECT WITHIN AUTH=LOGIN AUTH=PLAIN] IMAP server ready H migmx112 30.1 IMAP-1MiMV4-1tIcRX2vNm-00flL5
	a logout
	* BYE Server logging out
	a OK LOGOUT completed


I have debugged the problem for days, but cannot find out what the
problem is.

The background: I have qpsmtpd with auth_imap, to authenticate users
against a Dovecot backend, all running locally.

When trying to connect to the local Dovecot server (localhost:993) I
get this message in the logfile:

	dovecot: imap-login: Disconnected: Connection closed:
	SSL_accept() failed: error:0A000076:SSL routines::no suitable signature
	algorithm (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, TLS
	handshaking: SSL_accept() failed: error:0A000076:SSL routines::no
	suitable signature algorithm,
	session=<pqzOP5cwmtMAAAAAAAAAAAAAAAAAAAAB>

Openssl, again, works as expected.

In Dovecot I have allowed all SSL versions and ciphers:

	ssl_min_protocol = ANY
	ssl_cipher_list = ALL


The problem seems to be specific to Devuan -- or to my system --
the above example code works for a friend, running it on Debian
stable, which seems to have the identical version of the package.

My system is a fresh installation of Devuan stable.


Could you please check if it is a Devuan problem.

If not: Any clues how to solve it? ;-)

Thanks.


meillo



-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 5 (daedalus)
Release:	5
Codename:	daedalus
Architecture: x86_64

Kernel: Linux 6.1.0-31-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages libnet-imap-simple-ssl-perl depends on:
ii  libio-socket-ssl-perl    2.081-2
ii  libnet-imap-simple-perl  1.2211-1
ii  perl                     5.36.0-7+deb12u1

libnet-imap-simple-ssl-perl recommends no packages.

libnet-imap-simple-ssl-perl suggests no packages.

-- no debconf information

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.509 (Entity 5.509)
Content-Type: text/plain; charset=utf-8
X-Loop: owner@bugs.devuan.org
From: "Devuan bug Tracking System" <owner@bugs.devuan.org>
To: markus schnalke <meillo@marmaro.de>
Subject: bug#880: Acknowledgement (libnet-imap-simple-ssl-perl: IMAP SSL
 connection not possible)
Message-ID: <handler.880.B.174231396316075.ack@bugs.devuan.org>
References: <174231375827.29923.16609018463711557623.reportbug@marmaro.de>
X-Devuan-PR-Message: ack 880
X-Devuan-PR-Package: libnet-imap-simple-ssl-perl
Reply-To: 880@bugs.devuan.org
Date: Tue, 18 Mar 2025 16:08:02 +0000

Thank you for filing a new bug report with Devuan.

You can follow progress on this bug here: 880: https://bugs.devuan.org/cgi/=
bugreport.cgi?bug=3D880.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 devuan-dev@lists.dyne.org

If you wish to submit further information on this problem, please
send it to 880@bugs.devuan.org.

Please do not send mail to owner@bugs.devuan.org unless you wish
to report a problem with the Bug-tracking system.

--=20
880: https://bugs.devuan.org/cgi/bugreport.cgi?bug=3D880
Devuan Bug Tracking System
Contact owner@bugs.devuan.org with problems

Message sent:

MIME-Version: 1.0
X-Mailer: MIME-tools 5.509 (Entity 5.509)
X-Loop: owner@bugs.devuan.org
From: "Devuan bug Tracking System" <owner@bugs.devuan.org>
To: Mark Hindley <mark@hindley.org.uk>
Subject: bug#880: marked as done (libnet-imap-simple-ssl-perl: IMAP SSL
 connection not possible)
Message-ID: <handler.880.D880.174231720230460.ackdone@bugs.devuan.org>
References: <Z9mmSgNvEcQJCjCH@hindley.org.uk>
 <174231375827.29923.16609018463711557623.reportbug@marmaro.de>
X-Devuan-PR-Message: closed 880
X-Devuan-PR-Package: libnet-imap-simple-ssl-perl
Reply-To: 880@bugs.devuan.org
Date: Tue, 18 Mar 2025 17:02:02 +0000
Content-Type: multipart/mixed; boundary="----------=_1742317322-30471-0"

This is a multi-part message in MIME format...

------------=_1742317322-30471-0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

Your message dated Tue, 18 Mar 2025 16:58:50 +0000
with message-id <Z9mmSgNvEcQJCjCH@hindley.org.uk>
and subject line Re: [devuan-dev] bug#880: libnet-imap-simple-ssl-perl: IMA=
P SSL connection not possible
has caused the Devuan bug report #880,
regarding libnet-imap-simple-ssl-perl: IMAP SSL connection not possible
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.devuan.org
immediately.)


--=20
880: https://bugs.devuan.org/cgi/bugreport.cgi?bug=3D880
Devuan Bug Tracking System
Contact owner@bugs.devuan.org with problems

------------=_1742317322-30471-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by bugs.devuan.org; 18 Mar 2025 16:06:03 +0000
Return-Path: <meillo@marmaro.de>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Tue, 18 Mar 2025 16:06:03 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id LWwBIrOZ2WdPbQAAmSBk0A
	(envelope-from <meillo@marmaro.de>)
	for <bugs@devuan.org>; Tue, 18 Mar 2025 16:05:07 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 7098C64A; Tue, 18 Mar 2025 16:05:07 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.0 required=5.0 tests=SPF_PASS,T_SCC_BODY_TEXT_LINE,
	WEIRD_PORT autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=91.107.236.106; helo=marmaro.de; envelope-from=meillo@marmaro.de; receiver=<UNKNOWN> 
Received: from marmaro.de (marmaro.de [91.107.236.106])
	by email.devuan.org (Postfix) with ESMTP id 4ACF51F7
	for <submit@bugs.devuan.org>; Tue, 18 Mar 2025 16:05:06 +0000 (UTC)
Received: by marmaro.de (masqmail 0.3.6-dev, from userid 1000)
	id 1tuZOo-32u-00; Tue, 18 Mar 2025 17:02:38 +0100
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: markus schnalke <meillo@marmaro.de>
To: Devuan Bug Tracking System <submit@bugs.devuan.org>
Subject: libnet-imap-simple-ssl-perl: IMAP SSL connection not possible
Message-ID: <174231375827.29923.16609018463711557623.reportbug@marmaro.de>
X-Mailer: reportbug 12.0.0+devuan2
Date: Tue, 18 Mar 2025 17:02:38 +0100

Package: libnet-imap-simple-ssl-perl
Version: 1.3-5
Severity: normal

Hoi.

I am unable to establish a connection with IMAP servers:

	:-F cat /tmp/imap-connect-test.pl                   
	#!/usr/bin/perl
	 
	use Net::IMAP::Simple::SSL; 
	 
	Net::IMAP::Simple::SSL->new("imap.gmx.net:993", ssl_version=>"TLSv1") 
		or die("cannot connect to server\n"); 


	:-F perl /tmp/imap-connect-test.pl                  
	cannot connect to server


However, with Openssl I can:

	:-F openssl s_client -quiet -connect imap.gmx.net:993
	depth=2 C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 2
	verify return:1
	depth=1 C = DE, O = Deutsche Telekom Security GmbH, CN = Telekom Security ServerID OV Class 2 CA
	verify return:1
	depth=0 C = DE, ST = Rheinland-Pfalz, L = Montabaur, O = 1&1 Mail & Media GmbH, CN = mail.gmx.net
	verify return:1
	* OK [CAPABILITY IMAP4rev1 CHILDREN ENABLE ID IDLE LIST-EXTENDED LIST-STATUS LITERAL- MOVE NAMESPACE SASL-IR SORT SPECIAL-USE THREAD=ORDEREDSUBJECT UIDPLUS UNSELECT WITHIN AUTH=LOGIN AUTH=PLAIN] IMAP server ready H migmx112 30.1 IMAP-1MiMV4-1tIcRX2vNm-00flL5
	a logout
	* BYE Server logging out
	a OK LOGOUT completed


I have debugged the problem for days, but cannot find out what the
problem is.

The background: I have qpsmtpd with auth_imap, to authenticate users
against a Dovecot backend, all running locally.

When trying to connect to the local Dovecot server (localhost:993) I
get this message in the logfile:

	dovecot: imap-login: Disconnected: Connection closed:
	SSL_accept() failed: error:0A000076:SSL routines::no suitable signature
	algorithm (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, TLS
	handshaking: SSL_accept() failed: error:0A000076:SSL routines::no
	suitable signature algorithm,
	session=<pqzOP5cwmtMAAAAAAAAAAAAAAAAAAAAB>

Openssl, again, works as expected.

In Dovecot I have allowed all SSL versions and ciphers:

	ssl_min_protocol = ANY
	ssl_cipher_list = ALL


The problem seems to be specific to Devuan -- or to my system --
the above example code works for a friend, running it on Debian
stable, which seems to have the identical version of the package.

My system is a fresh installation of Devuan stable.


Could you please check if it is a Devuan problem.

If not: Any clues how to solve it? ;-)

Thanks.


meillo



-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 5 (daedalus)
Release:	5
Codename:	daedalus
Architecture: x86_64

Kernel: Linux 6.1.0-31-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages libnet-imap-simple-ssl-perl depends on:
ii  libio-socket-ssl-perl    2.081-2
ii  libnet-imap-simple-perl  1.2211-1
ii  perl                     5.36.0-7+deb12u1

libnet-imap-simple-ssl-perl recommends no packages.

libnet-imap-simple-ssl-perl suggests no packages.

-- no debconf information

------------=_1742317322-30471-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 880-done) by bugs.devuan.org; 18 Mar 2025 17:00:02 +0000
Return-Path: <mark@hindley.org.uk>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Tue, 18 Mar 2025 17:00:02 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id RL4hIUym2WeXcAAAmSBk0A
	(envelope-from <mark@hindley.org.uk>)
	for <bugs@devuan.org>; Tue, 18 Mar 2025 16:58:52 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 50873645; Tue, 18 Mar 2025 16:58:52 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS,
	T_SCC_BODY_TEXT_LINE,WEIRD_PORT autolearn=no autolearn_force=no
	version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id A0BAA1F7
	for <880-done@bugs.devuan.org>; Tue, 18 Mar 2025 16:58:51 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
	by mx.hindley.org.uk (Postfix) with SMTP id 6BFCD118;
	Tue, 18 Mar 2025 16:58:50 +0000 (GMT)
Received: (nullmailer pid 24382 invoked by uid 1000);
	Tue, 18 Mar 2025 16:58:50 -0000
Date: Tue, 18 Mar 2025 16:58:50 +0000
From: Mark Hindley <mark@hindley.org.uk>
To: markus schnalke <meillo@marmaro.de>, 880-done@bugs.devuan.org
Subject: Re: [devuan-dev] bug#880: libnet-imap-simple-ssl-perl: IMAP SSL
 connection not possible
Message-ID: <Z9mmSgNvEcQJCjCH@hindley.org.uk>
References: <174231375827.29923.16609018463711557623.reportbug@marmaro.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <174231375827.29923.16609018463711557623.reportbug@marmaro.de>
X-Debbugs-No-Ack: No Thanks

Markus,

On Tue, Mar 18, 2025 at 05:02:38PM +0100, markus schnalke wrote:
> Package: libnet-imap-simple-ssl-perl

This is not a forked package (none of perl is) so I would be astonished if this
is Devuan specific.

> Version: 1.3-5
> Severity: normal
> 
> Hoi.
> 
> I am unable to establish a connection with IMAP servers:
> 
> 	:-F cat /tmp/imap-connect-test.pl                   
> 	#!/usr/bin/perl
> 	 
> 	use Net::IMAP::Simple::SSL; 
> 	 
> 	Net::IMAP::Simple::SSL->new("imap.gmx.net:993", ssl_version=>"TLSv1") 
> 		or die("cannot connect to server\n");

For me, specifying TLSv1_2 or TLSv1_3 works. I suspect the server doesn't accept TLSv1.
 
> However, with Openssl I can:
> 
> 	:-F openssl s_client -quiet -connect imap.gmx.net:993

This is comparing different protocols.

If you do

  openssl s_client -quiet -connect imap.gmx.net:993 -tls1

you will get a protocol error which matches the perl TLSv1 error above.

Mark
------------=_1742317322-30471-0--

Message sent:

MIME-Version: 1.0
X-Mailer: MIME-tools 5.509 (Entity 5.509)
X-Loop: owner@bugs.devuan.org
From: "Devuan bug Tracking System" <owner@bugs.devuan.org>
To: markus schnalke <meillo@marmaro.de>
Subject: bug#880 closed by Mark Hindley <mark@hindley.org.uk> (Re:
 [devuan-dev] bug#880: libnet-imap-simple-ssl-perl: IMAP SSL connection not
 possible)
Message-ID: <handler.880.D880.174231720230460.notifdone@bugs.devuan.org>
References: <Z9mmSgNvEcQJCjCH@hindley.org.uk>
 <174231375827.29923.16609018463711557623.reportbug@marmaro.de>
X-Devuan-PR-Message: they-closed 880
X-Devuan-PR-Package: libnet-imap-simple-ssl-perl
Reply-To: 880@bugs.devuan.org
Date: Tue, 18 Mar 2025 17:02:03 +0000
Content-Type: multipart/mixed; boundary="----------=_1742317323-30471-1"

This is a multi-part message in MIME format...

------------=_1742317323-30471-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

This is an automatic notification regarding your bug report
which was filed against the libnet-imap-simple-ssl-perl package:

#880: libnet-imap-simple-ssl-perl: IMAP SSL connection not possible

It has been closed by Mark Hindley <mark@hindley.org.uk>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Mark Hindley <mark@hin=
dley.org.uk> by
replying to this email.


--=20
880: https://bugs.devuan.org/cgi/bugreport.cgi?bug=3D880
Devuan Bug Tracking System
Contact owner@bugs.devuan.org with problems

------------=_1742317323-30471-1
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 880-done) by bugs.devuan.org; 18 Mar 2025 17:00:02 +0000
Return-Path: <mark@hindley.org.uk>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Tue, 18 Mar 2025 17:00:02 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id RL4hIUym2WeXcAAAmSBk0A
	(envelope-from <mark@hindley.org.uk>)
	for <bugs@devuan.org>; Tue, 18 Mar 2025 16:58:52 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 50873645; Tue, 18 Mar 2025 16:58:52 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS,
	T_SCC_BODY_TEXT_LINE,WEIRD_PORT autolearn=no autolearn_force=no
	version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id A0BAA1F7
	for <880-done@bugs.devuan.org>; Tue, 18 Mar 2025 16:58:51 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
	by mx.hindley.org.uk (Postfix) with SMTP id 6BFCD118;
	Tue, 18 Mar 2025 16:58:50 +0000 (GMT)
Received: (nullmailer pid 24382 invoked by uid 1000);
	Tue, 18 Mar 2025 16:58:50 -0000
Date: Tue, 18 Mar 2025 16:58:50 +0000
From: Mark Hindley <mark@hindley.org.uk>
To: markus schnalke <meillo@marmaro.de>, 880-done@bugs.devuan.org
Subject: Re: [devuan-dev] bug#880: libnet-imap-simple-ssl-perl: IMAP SSL
 connection not possible
Message-ID: <Z9mmSgNvEcQJCjCH@hindley.org.uk>
References: <174231375827.29923.16609018463711557623.reportbug@marmaro.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <174231375827.29923.16609018463711557623.reportbug@marmaro.de>
X-Debbugs-No-Ack: No Thanks

Markus,

On Tue, Mar 18, 2025 at 05:02:38PM +0100, markus schnalke wrote:
> Package: libnet-imap-simple-ssl-perl

This is not a forked package (none of perl is) so I would be astonished if this
is Devuan specific.

> Version: 1.3-5
> Severity: normal
> 
> Hoi.
> 
> I am unable to establish a connection with IMAP servers:
> 
> 	:-F cat /tmp/imap-connect-test.pl                   
> 	#!/usr/bin/perl
> 	 
> 	use Net::IMAP::Simple::SSL; 
> 	 
> 	Net::IMAP::Simple::SSL->new("imap.gmx.net:993", ssl_version=>"TLSv1") 
> 		or die("cannot connect to server\n");

For me, specifying TLSv1_2 or TLSv1_3 works. I suspect the server doesn't accept TLSv1.
 
> However, with Openssl I can:
> 
> 	:-F openssl s_client -quiet -connect imap.gmx.net:993

This is comparing different protocols.

If you do

  openssl s_client -quiet -connect imap.gmx.net:993 -tls1

you will get a protocol error which matches the perl TLSv1 error above.

Mark
------------=_1742317323-30471-1
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by bugs.devuan.org; 18 Mar 2025 16:06:03 +0000
Return-Path: <meillo@marmaro.de>
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Tue, 18 Mar 2025 16:06:03 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id LWwBIrOZ2WdPbQAAmSBk0A
	(envelope-from <meillo@marmaro.de>)
	for <bugs@devuan.org>; Tue, 18 Mar 2025 16:05:07 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 7098C64A; Tue, 18 Mar 2025 16:05:07 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.0 required=5.0 tests=SPF_PASS,T_SCC_BODY_TEXT_LINE,
	WEIRD_PORT autolearn=ham autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=91.107.236.106; helo=marmaro.de; envelope-from=meillo@marmaro.de; receiver=<UNKNOWN> 
Received: from marmaro.de (marmaro.de [91.107.236.106])
	by email.devuan.org (Postfix) with ESMTP id 4ACF51F7
	for <submit@bugs.devuan.org>; Tue, 18 Mar 2025 16:05:06 +0000 (UTC)
Received: by marmaro.de (masqmail 0.3.6-dev, from userid 1000)
	id 1tuZOo-32u-00; Tue, 18 Mar 2025 17:02:38 +0100
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: markus schnalke <meillo@marmaro.de>
To: Devuan Bug Tracking System <submit@bugs.devuan.org>
Subject: libnet-imap-simple-ssl-perl: IMAP SSL connection not possible
Message-ID: <174231375827.29923.16609018463711557623.reportbug@marmaro.de>
X-Mailer: reportbug 12.0.0+devuan2
Date: Tue, 18 Mar 2025 17:02:38 +0100

Package: libnet-imap-simple-ssl-perl
Version: 1.3-5
Severity: normal

Hoi.

I am unable to establish a connection with IMAP servers:

	:-F cat /tmp/imap-connect-test.pl                   
	#!/usr/bin/perl
	 
	use Net::IMAP::Simple::SSL; 
	 
	Net::IMAP::Simple::SSL->new("imap.gmx.net:993", ssl_version=>"TLSv1") 
		or die("cannot connect to server\n"); 


	:-F perl /tmp/imap-connect-test.pl                  
	cannot connect to server


However, with Openssl I can:

	:-F openssl s_client -quiet -connect imap.gmx.net:993
	depth=2 C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 2
	verify return:1
	depth=1 C = DE, O = Deutsche Telekom Security GmbH, CN = Telekom Security ServerID OV Class 2 CA
	verify return:1
	depth=0 C = DE, ST = Rheinland-Pfalz, L = Montabaur, O = 1&1 Mail & Media GmbH, CN = mail.gmx.net
	verify return:1
	* OK [CAPABILITY IMAP4rev1 CHILDREN ENABLE ID IDLE LIST-EXTENDED LIST-STATUS LITERAL- MOVE NAMESPACE SASL-IR SORT SPECIAL-USE THREAD=ORDEREDSUBJECT UIDPLUS UNSELECT WITHIN AUTH=LOGIN AUTH=PLAIN] IMAP server ready H migmx112 30.1 IMAP-1MiMV4-1tIcRX2vNm-00flL5
	a logout
	* BYE Server logging out
	a OK LOGOUT completed


I have debugged the problem for days, but cannot find out what the
problem is.

The background: I have qpsmtpd with auth_imap, to authenticate users
against a Dovecot backend, all running locally.

When trying to connect to the local Dovecot server (localhost:993) I
get this message in the logfile:

	dovecot: imap-login: Disconnected: Connection closed:
	SSL_accept() failed: error:0A000076:SSL routines::no suitable signature
	algorithm (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, TLS
	handshaking: SSL_accept() failed: error:0A000076:SSL routines::no
	suitable signature algorithm,
	session=<pqzOP5cwmtMAAAAAAAAAAAAAAAAAAAAB>

Openssl, again, works as expected.

In Dovecot I have allowed all SSL versions and ciphers:

	ssl_min_protocol = ANY
	ssl_cipher_list = ALL


The problem seems to be specific to Devuan -- or to my system --
the above example code works for a friend, running it on Debian
stable, which seems to have the identical version of the package.

My system is a fresh installation of Devuan stable.


Could you please check if it is a Devuan problem.

If not: Any clues how to solve it? ;-)

Thanks.


meillo



-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 5 (daedalus)
Release:	5
Codename:	daedalus
Architecture: x86_64

Kernel: Linux 6.1.0-31-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages libnet-imap-simple-ssl-perl depends on:
ii  libio-socket-ssl-perl    2.081-2
ii  libnet-imap-simple-perl  1.2211-1
ii  perl                     5.36.0-7+deb12u1

libnet-imap-simple-ssl-perl recommends no packages.

libnet-imap-simple-ssl-perl suggests no packages.

-- no debconf information

------------=_1742317323-30471-1--