Received: (at 880-done) by bugs.devuan.org; 18 Mar 2025 17:00:02 +0000 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Tue, 18 Mar 2025 17:00:02 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id RL4hIUym2WeXcAAAmSBk0A (envelope-from <[email protected]>) for <[email protected]>; Tue, 18 Mar 2025 16:58:52 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 50873645; Tue, 18 Mar 2025 16:58:52 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS, T_SCC_BODY_TEXT_LINE,WEIRD_PORT autolearn=no autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86]) by email.devuan.org (Postfix) with ESMTPS id A0BAA1F7 for <[email protected]>; Tue, 18 Mar 2025 16:58:51 +0000 (UTC) Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3]) by mx.hindley.org.uk (Postfix) with SMTP id 6BFCD118; Tue, 18 Mar 2025 16:58:50 +0000 (GMT) Received: (nullmailer pid 24382 invoked by uid 1000); Tue, 18 Mar 2025 16:58:50 -0000 Date: Tue, 18 Mar 2025 16:58:50 +0000 From: Mark Hindley <[email protected]> To: markus schnalke <[email protected]>, [email protected] Subject: Re: [devuan-dev] bug#880: libnet-imap-simple-ssl-perl: IMAP SSL connection not possible Message-ID: <[email protected]> References: <[email protected]> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <[email protected]> X-Debbugs-No-Ack: No Thanks Markus, On Tue, Mar 18, 2025 at 05:02:38PM +0100, markus schnalke wrote: > Package: libnet-imap-simple-ssl-perl This is not a forked package (none of perl is) so I would be astonished if this is Devuan specific. > Version: 1.3-5 > Severity: normal > > Hoi. > > I am unable to establish a connection with IMAP servers: > > :-F cat /tmp/imap-connect-test.pl > #!/usr/bin/perl > > use Net::IMAP::Simple::SSL; > > Net::IMAP::Simple::SSL->new("imap.gmx.net:993", ssl_version=>"TLSv1") > or die("cannot connect to server\n"); For me, specifying TLSv1_2 or TLSv1_3 works. I suspect the server doesn't accept TLSv1. > However, with Openssl I can: > > :-F openssl s_client -quiet -connect imap.gmx.net:993 This is comparing different protocols. If you do openssl s_client -quiet -connect imap.gmx.net:993 -tls1 you will get a protocol error which matches the perl TLSv1 error above. Mark
markus schnalke <[email protected]>
:Mark Hindley <[email protected]>
:Received: (at submit) by bugs.devuan.org; 18 Mar 2025 16:06:03 +0000 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4] by doc.devuan.org with IMAP (fetchmail-6.4.16) for <debbugs@localhost> (single-drop); Tue, 18 Mar 2025 16:06:03 +0000 (UTC) Received: from email.devuan.org by email.devuan.org with LMTP id LWwBIrOZ2WdPbQAAmSBk0A (envelope-from <[email protected]>) for <[email protected]>; Tue, 18 Mar 2025 16:05:07 +0000 Received: by email.devuan.org (Postfix, from userid 109) id 7098C64A; Tue, 18 Mar 2025 16:05:07 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org X-Spam-Level: X-Spam-Status: No, score=-0.0 required=5.0 tests=SPF_PASS,T_SCC_BODY_TEXT_LINE, WEIRD_PORT autolearn=ham autolearn_force=no version=3.4.6 Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=91.107.236.106; helo=marmaro.de; [email protected]; receiver=<UNKNOWN> Received: from marmaro.de (marmaro.de [91.107.236.106]) by email.devuan.org (Postfix) with ESMTP id 4ACF51F7 for <[email protected]>; Tue, 18 Mar 2025 16:05:06 +0000 (UTC) Received: by marmaro.de (masqmail 0.3.6-dev, from userid 1000) id 1tuZOo-32u-00; Tue, 18 Mar 2025 17:02:38 +0100 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: markus schnalke <[email protected]> To: Devuan Bug Tracking System <[email protected]> Subject: libnet-imap-simple-ssl-perl: IMAP SSL connection not possible Message-ID: <[email protected]> X-Mailer: reportbug 12.0.0+devuan2 Date: Tue, 18 Mar 2025 17:02:38 +0100 Package: libnet-imap-simple-ssl-perl Version: 1.3-5 Severity: normal Hoi. I am unable to establish a connection with IMAP servers: :-F cat /tmp/imap-connect-test.pl #!/usr/bin/perl use Net::IMAP::Simple::SSL; Net::IMAP::Simple::SSL->new("imap.gmx.net:993", ssl_version=>"TLSv1") or die("cannot connect to server\n"); :-F perl /tmp/imap-connect-test.pl cannot connect to server However, with Openssl I can: :-F openssl s_client -quiet -connect imap.gmx.net:993 depth=2 C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 2 verify return:1 depth=1 C = DE, O = Deutsche Telekom Security GmbH, CN = Telekom Security ServerID OV Class 2 CA verify return:1 depth=0 C = DE, ST = Rheinland-Pfalz, L = Montabaur, O = 1&1 Mail & Media GmbH, CN = mail.gmx.net verify return:1 * OK [CAPABILITY IMAP4rev1 CHILDREN ENABLE ID IDLE LIST-EXTENDED LIST-STATUS LITERAL- MOVE NAMESPACE SASL-IR SORT SPECIAL-USE THREAD=ORDEREDSUBJECT UIDPLUS UNSELECT WITHIN AUTH=LOGIN AUTH=PLAIN] IMAP server ready H migmx112 30.1 IMAP-1MiMV4-1tIcRX2vNm-00flL5 a logout * BYE Server logging out a OK LOGOUT completed I have debugged the problem for days, but cannot find out what the problem is. The background: I have qpsmtpd with auth_imap, to authenticate users against a Dovecot backend, all running locally. When trying to connect to the local Dovecot server (localhost:993) I get this message in the logfile: dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A000076:SSL routines::no suitable signature algorithm (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, TLS handshaking: SSL_accept() failed: error:0A000076:SSL routines::no suitable signature algorithm, session=<pqzOP5cwmtMAAAAAAAAAAAAAAAAAAAAB> Openssl, again, works as expected. In Dovecot I have allowed all SSL versions and ciphers: ssl_min_protocol = ANY ssl_cipher_list = ALL The problem seems to be specific to Devuan -- or to my system -- the above example code works for a friend, running it on Debian stable, which seems to have the identical version of the package. My system is a fresh installation of Devuan stable. Could you please check if it is a Devuan problem. If not: Any clues how to solve it? ;-) Thanks. meillo -- System Information: Distributor ID: Devuan Description: Devuan GNU/Linux 5 (daedalus) Release: 5 Codename: daedalus Architecture: x86_64 Kernel: Linux 6.1.0-31-amd64 (SMP w/4 CPU threads; PREEMPT) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages libnet-imap-simple-ssl-perl depends on: ii libio-socket-ssl-perl 2.081-2 ii libnet-imap-simple-perl 1.2211-1 ii perl 5.36.0-7+deb12u1 libnet-imap-simple-ssl-perl recommends no packages. libnet-imap-simple-ssl-perl suggests no packages. -- no debconf information
markus schnalke <[email protected]>
:[email protected]
.
Full text available.[email protected], [email protected]
:bug#880
; Package libnet-imap-simple-ssl-perl
.
Full text available.Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.
Devuan Bugs Owner <[email protected]>.
Last modified:
Sat, 5 Apr 2025 00:39:01 UTC