From debbugs-submit-bounces@debbugs.gnu.org Thu Jan 10 11:48:02 2013 Received: (at submit) by debbugs.gnu.org; 10 Jan 2013 16:48:02 +0000 Received: from localhost ([127.0.0.1]:54385 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1TtLIP-0005no-DT for submit@debbugs.gnu.org; Thu, 10 Jan 2013 11:48:02 -0500 Received: from eggs.gnu.org ([208.118.235.92]:39944) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1TtLIK-0005nX-43 for submit@debbugs.gnu.org; Thu, 10 Jan 2013 11:47:59 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1TtLHq-0004us-JR for submit@debbugs.gnu.org; Thu, 10 Jan 2013 11:47:49 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-101.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD, USER_IN_WHITELIST autolearn=unavailable version=3.3.2 Received: from lists.gnu.org ([208.118.235.17]:42781) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TtLHq-0004oE-Fg for submit@debbugs.gnu.org; Thu, 10 Jan 2013 11:47:26 -0500 Received: from eggs.gnu.org ([208.118.235.92]:48989) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TtL5B-0004B0-UQ for bug-gnu-emacs@gnu.org; Thu, 10 Jan 2013 11:34:32 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1TtL55-00014I-Js for bug-gnu-emacs@gnu.org; Thu, 10 Jan 2013 11:34:21 -0500 Received: from snape.cebitec.uni-bielefeld.de ([129.70.160.84]:45956 helo=smtp-relay.CeBiTec.Uni-Bielefeld.DE) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TtL55-00013M-AE for bug-gnu-emacs@gnu.org; Thu, 10 Jan 2013 11:34:15 -0500 Received: from localhost (localhost.CeBiTec.Uni-Bielefeld.DE [127.0.0.1]) by smtp-relay.CeBiTec.Uni-Bielefeld.DE (Postfix) with ESMTP id 5808AA63 for ; Thu, 10 Jan 2013 17:34:13 +0100 (CET) X-Virus-Scanned: amavisd-new at cebitec.uni-bielefeld.de Received: from smtp-relay.CeBiTec.Uni-Bielefeld.DE ([127.0.0.1]) by localhost (malfoy.CeBiTec.Uni-Bielefeld.DE [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 2a3WaMj8rXvf for ; Thu, 10 Jan 2013 17:34:08 +0100 (CET) Received: from fuego.CeBiTec.Uni-Bielefeld.DE (fuego.CeBiTec.Uni-Bielefeld.DE [129.70.161.122]) by smtp-relay.CeBiTec.Uni-Bielefeld.DE (Postfix) with ESMTP id CC1A0A62 for ; Thu, 10 Jan 2013 17:34:08 +0100 (CET) From: Rainer Orth To: bug-gnu-emacs@gnu.org Subject: 24.2.92; gnus fails imap connection with TLS Date: Thu, 10 Jan 2013 17:34:08 +0100 Message-ID: MIME-Version: 1.0 Content-Type: text/plain X-detected-operating-system: by eggs.gnu.org: Solaris 10 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 208.118.235.17 X-Spam-Score: -6.9 (------) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -6.9 (------) On Solaris 11.1/x86, I cannot connect to our imap server with TLS anymore: .emacs has (setq gnus-secondary-select-methods '((nnimap "cebitec" (nnimap-address "") (nnimap-stream ssl)))) In *Messages*, I find Opening nnimap server on cebitec... Opening connection to via tls... gnutls.c: [0] (Emacs) fatal error: Decryption has failed. gnutls.el: (err=[-24] Decryption has failed.) boot: (:priority NORMAL :hostname :loglevel 0 :min-prime-bits 256 :trustfiles nil :crlfiles nil :keylist nil :verify-flags nil :verify-error nil :verify-hostname-error nil :callbacks nil) Unable to open server nnimap+cebitec due to: GnuTLS error: #, -24 Opening nnimap server on cebitec...done No new newsgroups Checking new news... Reading active file via nnnil...done Reading active file from cebitec via nnimap...done Reading active file via nndraft...done Checking new news...done Warning: Unable to open server nnimap+cebitec due to: GnuTLS error: #, -24 gnutls.c: [0] (Emacs) fatal error: The specified session has been invalidated for some reason. [2 times] libgnutls.so.26 from gnutls 2.8.6 is bundled with the OS. In GNU Emacs 24.2.92.1 (i386-pc-solaris2.11, GTK+ Version 2.20.1) of 2013-01-10 on fuego Windowing system distributor `Oracle Corporation, based on X.Org Foundation sources', version 11.0.11202000 Configured using: `configure '--prefix=/vol/gnu' '--without-gif'' Important settings: value of $LC_ALL: value of $LC_COLLATE: value of $LC_CTYPE: iso_8859_1 value of $LC_MESSAGES: value of $LC_MONETARY: value of $LC_NUMERIC: value of $LC_TIME: value of $LANG: C locale-coding-system: iso-latin-1-unix default enable-multibyte-characters: t Major mode: Fundamental Minor modes in effect: desktop-save-mode: t tooltip-mode: t mouse-wheel-mode: t tool-bar-mode: t menu-bar-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t blink-cursor-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t line-number-mode: t transient-mark-mode: t Recent input: C-v C-v < C-x b * c s c x g n u s C-x b * M x r e p o r g n u s SPC f a C-g C-x C-f ~ / . e m C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-n C-x k C-x 5 2 x r e p o r Recent messages: Opening nnimap server on cebitec...done No new newsgroups Checking new news... Reading active file via nnnil...done Reading active file from cebitec via nnimap...done Reading active file via nndraft...done Checking new news...done Warning: Unable to open server nnimap+cebitec due to: GnuTLS error: #, -24 gnutls.c: [0] (Emacs) fatal error: The specified session has been invalidated for some reason. [2 times] Making completion list... [2 times] Quit Load-path shadows: /vol/gnu/share/emacs/site-lisp/psgml/psgml-edit hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.0/psgml-edit /vol/gnu/share/emacs/site-lisp/psgml/psgml-charent hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.0/psgml-charent /vol/gnu/share/emacs/site-lisp/psgml/psgml-dtd hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.0/psgml-dtd /vol/gnu/share/emacs/site-lisp/psgml/psgml-parse hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.0/psgml-parse /vol/gnu/share/emacs/site-lisp/psgml/psgml-api hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.0/psgml-api /vol/gnu/share/emacs/site-lisp/psgml/psgml-info hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.0/psgml-info /vol/gnu/share/emacs/site-lisp/psgml/psgml-other hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.0/psgml-other /vol/gnu/share/emacs/site-lisp/psgml/psgml hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.0/psgml /vol/gnu/share/emacs/site-lisp/psgml/psgml-other hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.5/psgml-other /vol/gnu/share/emacs/site-lisp/psgml/psgml-edit hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.5/psgml-edit /vol/gnu/share/emacs/site-lisp/psgml/psgml hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.5/psgml /vol/gnu/share/emacs/site-lisp/psgml/psgml-api hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.5/psgml-api /vol/gnu/share/emacs/site-lisp/psgml/psgml-info hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.5/psgml-info /vol/gnu/share/emacs/site-lisp/psgml/psgml-dtd hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.5/psgml-dtd /vol/gnu/share/emacs/site-lisp/psgml/psgml-charent hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.5/psgml-charent /vol/gnu/share/emacs/site-lisp/psgml/psgml-parse hides /vol/gnu/share/emacs/site-lisp/psgml/1.2.5/psgml-parse /vol/gnu/share/emacs/site-lisp/info-look hides /vol/gnu/src/emacs/emacs-24.2.92/lisp/info-look Features: (shadow sort mail-extr emacsbug sendmail help-mode gnus-topic nndraft nnmh nnagent nnml gnutls network-stream auth-source eieio byte-opt bytecomp byte-compile cconv starttls nnimap parse-time tls utf7 netrc nnfolder nnnil gnus-agent gnus-srvr gnus-score score-mode nnvirtual gnus-msg gnus-art mm-uu mml2015 epg-config mm-view mml-smime smime password-cache dig mailcap nntp gnus-cache gnus-sum nnoo gnus-group gnus-undo nnmail mail-source gnus-start gnus-spec gnus-int gnus-range message idna format-spec rfc822 mml easymenu mml-sec mm-decode mm-bodies mm-encode mail-parse rfc2231 rfc2047 rfc2045 ietf-drums mailabbrev gmm-utils mailheader gnus-win gnus gnus-ems nnheader gnus-util mail-utils mm-util mail-prsvr wid-edit dired tex-site go-mode-load desktop time-date tooltip ediff-hook vc-hooks lisp-float-type mwheel x-win x-dnd tool-bar dnd fontset image regexp-opt fringe tabulated-list newcomment lisp-mode register page menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock syntax facemenu font-core frame cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer loaddefs button faces cus-face macroexp files text-properties overlay sha1 md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote make-network-process dbusbind dynamic-setting system-font-setting font-render-setting move-toolbar gtk x-toolkit x multi-tty emacs) -- ----------------------------------------------------------------------------- Rainer Orth, Center for Biotechnology, Bielefeld University From debbugs-submit-bounces@debbugs.gnu.org Fri Jan 11 09:10:14 2013 Received: (at 13406) by debbugs.gnu.org; 11 Jan 2013 14:10:14 +0000 Received: from localhost ([127.0.0.1]:55271 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1TtfJB-0004qx-5D for submit@debbugs.gnu.org; Fri, 11 Jan 2013 09:10:14 -0500 Received: from z.lifelogs.com ([173.255.230.239]:49996) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1TtfJ5-0004qm-NV for 13406@debbugs.gnu.org; Fri, 11 Jan 2013 09:10:08 -0500 Received: from heechee (c-65-96-148-157.hsd1.ma.comcast.net [65.96.148.157]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: tzz) by z.lifelogs.com (Postfix) with ESMTPSA id F028E6E562; Fri, 11 Jan 2013 14:09:55 +0000 (UTC) From: Ted Zlatanov To: Rainer Orth Subject: Re: bug#13406: 24.2.92; gnus fails imap connection with TLS Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos References: X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes Date: Fri, 11 Jan 2013 09:09:54 -0500 In-Reply-To: (Rainer Orth's message of "Thu, 10 Jan 2013 17:34:08 +0100") Message-ID: <87hamn7qvh.fsf@lifelogs.com> User-Agent: Gnus/5.130006 (Ma Gnus v0.6) Emacs/24.3.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.5 (/) X-Debbugs-Envelope-To: 13406 Cc: 13406@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -1.9 (-) On Thu, 10 Jan 2013 17:34:08 +0100 Rainer Orth wrote: RO> On Solaris 11.1/x86, I cannot connect to our imap server with TLS RO> anymore: RO> .emacs has RO> (setq gnus-secondary-select-methods RO> '((nnimap "cebitec" RO> (nnimap-address "") RO> (nnimap-stream ssl)))) RO> In *Messages*, I find RO> Opening nnimap server on cebitec... RO> Opening connection to via tls... RO> gnutls.c: [0] (Emacs) fatal error: Decryption has failed. RO> gnutls.el: (err=[-24] Decryption has failed.) boot: (:priority NORMAL :hostname :loglevel 0 :min-prime-bits 256 :trustfiles nil :crlfiles nil :keylist nil :verify-flags nil :verify-error nil :verify-hostname-error nil :callbacks nil) RO> Unable to open server nnimap+cebitec due to: GnuTLS error: #, -24 RO> Opening nnimap server on cebitec...done RO> No new newsgroups RO> Checking new news... RO> Reading active file via nnnil...done RO> Reading active file from cebitec via nnimap...done RO> Reading active file via nndraft...done RO> Checking new news...done RO> Warning: Unable to open server nnimap+cebitec due to: GnuTLS error: #, -24 RO> gnutls.c: [0] (Emacs) fatal error: The specified session has been invalidated for some reason. [2 times] RO> libgnutls.so.26 from gnutls 2.8.6 is bundled with the OS. Can you try from the command line, with `gnutls-cli'? Thanks Ted From debbugs-submit-bounces@debbugs.gnu.org Tue Jan 15 05:25:05 2013 Received: (at 13406) by debbugs.gnu.org; 15 Jan 2013 10:25:05 +0000 Received: from localhost ([127.0.0.1]:60948 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1Tv3hZ-00086V-Fs for submit@debbugs.gnu.org; Tue, 15 Jan 2013 05:25:05 -0500 Received: from snape.cebitec.uni-bielefeld.de ([129.70.160.84]:50266 helo=smtp-relay.CeBiTec.Uni-Bielefeld.DE) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1Tv3hW-000865-CQ for 13406@debbugs.gnu.org; Tue, 15 Jan 2013 05:25:03 -0500 Received: from localhost (localhost.CeBiTec.Uni-Bielefeld.DE [127.0.0.1]) by smtp-relay.CeBiTec.Uni-Bielefeld.DE (Postfix) with ESMTP id EB42E695 for <13406@debbugs.gnu.org>; Tue, 15 Jan 2013 11:24:31 +0100 (CET) X-Virus-Scanned: amavisd-new at cebitec.uni-bielefeld.de Received: from smtp-relay.CeBiTec.Uni-Bielefeld.DE ([127.0.0.1]) by localhost (malfoy.CeBiTec.Uni-Bielefeld.DE [127.0.0.1]) (amavisd-new, port 10024) with LMTP id I7RlRk3FyC8h for <13406@debbugs.gnu.org>; Tue, 15 Jan 2013 11:24:30 +0100 (CET) Received: from lokon.CeBiTec.Uni-Bielefeld.DE (lokon.CeBiTec.Uni-Bielefeld.DE [129.70.161.110]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp-relay.CeBiTec.Uni-Bielefeld.DE (Postfix) with ESMTPS id 54FD2694 for <13406@debbugs.gnu.org>; Tue, 15 Jan 2013 11:24:30 +0100 (CET) Received: (from ro@localhost) by lokon.CeBiTec.Uni-Bielefeld.DE (8.14.5+Sun/8.14.5/Submit) id r0FAOTOC009603; Tue, 15 Jan 2013 11:24:29 +0100 (MET) X-Authentication-Warning: lokon.CeBiTec.Uni-Bielefeld.DE: ro set sender to ro@CeBiTec.Uni-Bielefeld.DE using -f From: Rainer Orth To: 13406@debbugs.gnu.org Subject: Re: bug#13406: 24.2.92; gnus fails imap connection with TLS References: <87hamn7qvh.fsf@lifelogs.com> Date: Tue, 15 Jan 2013 11:24:29 +0100 In-Reply-To: <87hamn7qvh.fsf@lifelogs.com> (Ted Zlatanov's message of "Fri, 11 Jan 2013 09:09:54 -0500") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.2.92 (usg-unix-v) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 13406 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -1.9 (-) Ted Zlatanov writes: > Can you try from the command line, with `gnutls-cli'? gnutls-cli isn't installed on Solaris 11, so I built the upstream version of gnutls 2.8.6 myself. With the unchanged version, imap with TLS works fine. I've then dug up the build receipe on opensolaris.org and found that the fix for CVE-2012-1573 is wrong: while upstream http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=422214868061370aeeb0ac9cd0f021a5c350a57d;hp=cfea38b5482c21fe6ddffaddc59a0040f80bd578 uses a ciphertext.size < hash_size test, Solaris has http://src.opensolaris.org/source/xref/jds/spec-files/branches/gnome-2-30-s11update/patches/gnutls-02-cve-2012-1573.diff > hash_size instead. So the report is invalid and I'll report upstream. Rainer -- ----------------------------------------------------------------------------- Rainer Orth, Center for Biotechnology, Bielefeld University From debbugs-submit-bounces@debbugs.gnu.org Tue Jan 15 12:27:39 2013 Received: (at control) by debbugs.gnu.org; 15 Jan 2013 17:27:39 +0000 Received: from localhost ([127.0.0.1]:33668 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1TvAIU-0002tk-8v for submit@debbugs.gnu.org; Tue, 15 Jan 2013 12:27:39 -0500 Received: from fencepost.gnu.org ([208.118.235.10]:34992) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1TvAIS-0002te-Si for control@debbugs.gnu.org; Tue, 15 Jan 2013 12:27:37 -0500 Received: from rgm by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1TvAHy-0005L0-5o for control@debbugs.gnu.org; Tue, 15 Jan 2013 12:27:06 -0500 Date: Tue, 15 Jan 2013 12:27:06 -0500 Message-Id: Subject: control message for bug 13406 To: X-Mailer: mail (GNU Mailutils 2.1) From: Glenn Morris X-Spam-Score: -4.2 (----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -4.2 (----) tag 13406 notabug close 13406 From debbugs-submit-bounces@debbugs.gnu.org Wed Jan 16 09:09:49 2013 Received: (at 13406) by debbugs.gnu.org; 16 Jan 2013 14:09:49 +0000 Received: from localhost ([127.0.0.1]:34770 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1TvTga-0002pG-MB for submit@debbugs.gnu.org; Wed, 16 Jan 2013 09:09:49 -0500 Received: from z.lifelogs.com ([173.255.230.239]:48858) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1TvTgW-0002p2-Kc; Wed, 16 Jan 2013 09:09:45 -0500 Received: from heechee (c-65-96-148-157.hsd1.ma.comcast.net [65.96.148.157]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: tzz) by z.lifelogs.com (Postfix) with ESMTPSA id 5C5F3DE0B1; Wed, 16 Jan 2013 14:09:08 +0000 (UTC) From: Ted Zlatanov To: Rainer Orth Subject: Re: bug#13406: 24.2.92; gnus fails imap connection with TLS Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos References: <87hamn7qvh.fsf@lifelogs.com> X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never Gmane-Reply-To-List: yes Date: Wed, 16 Jan 2013 09:09:06 -0500 In-Reply-To: (Rainer Orth's message of "Tue, 15 Jan 2013 11:24:29 +0100") Message-ID: <87zk09z0cd.fsf@lifelogs.com> User-Agent: Gnus/5.130006 (Ma Gnus v0.6) Emacs/24.3.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -1.9 (-) X-Debbugs-Envelope-To: 13406 Cc: 13406@debbugs.gnu.org, 13406-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -1.9 (-) On Tue, 15 Jan 2013 11:24:29 +0100 Rainer Orth wrote: RO> Ted Zlatanov writes: >> Can you try from the command line, with `gnutls-cli'? RO> gnutls-cli isn't installed on Solaris 11, so I built the upstream RO> version of gnutls 2.8.6 myself. With the unchanged version, imap with RO> TLS works fine. I've then dug up the build receipe on opensolaris.org RO> and found that the fix for CVE-2012-1573 is wrong: while upstream RO> http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=422214868061370aeeb0ac9cd0f021a5c350a57d;hp=cfea38b5482c21fe6ddffaddc59a0040f80bd578 RO> uses a ciphertext.size < hash_size test, Solaris has RO> http://src.opensolaris.org/source/xref/jds/spec-files/branches/gnome-2-30-s11update/patches/gnutls-02-cve-2012-1573.diff >> hash_size instead. RO> So the report is invalid and I'll report upstream. Thank you for the thoroughness, it saves us a lot of work! Marking this bug as done. Ted From unknown Mon Aug 18 02:37:43 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Thu, 14 Feb 2013 12:24:02 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator