[bug-mailutils] Re: [PATCH] starttls fix

[Simon Josefsson]

Wojciech Polak <address@hidden> writes:

> On Sun, 19 Jan 2003 23:56:48 +0100 Simon Josefsson wrote:
>
>> > > Btw, it would be useful if STARTTLS was enabled even if the CA cert
>> > > was not specified.  Clients may trust a server cert directly.
>> >
>> > Do you mean "trusted CAs file", i.e. --ssl-cafile ?
>> > If so, then it's not required.
>> 
>> You are right, I must have made some error during testing.  Still,
>> enabling starttls when there is no client private key and cert would
>> be useful too.
>
> Who says that we require a private key or a certificate in a client
> program? gnu-imap4d and gnu-pop3d are servers, not clients. You can
> connect to them with any IMAP/POP3 client, without specifying any
> private key or a certificate in your client. Try fetchmail as a test.

imap4d doesn't seem to advertise STARTTLS unless the cert/key is
specified:

address@hidden:~/src/mailutils/imap4d$ ./imap4d
Oops, secure memory pool already initialized
* OK IMAP4rev1 Debugging mode
. capability
* CAPABILITY IMAP4rev1 NAMESPACE X-VERSION AUTH=EXTERNAL AUTH=LOGIN AUTH=PLAIN
. OK CAPABILITY Completed
. logout
* BYE Session terminating.
. OK LOGOUT Completed
address@hidden:~/src/mailutils/imap4d$ ./imap4d --ssl-key=/home/jas/certs/sj.key
Oops, secure memory pool already initialized
* OK IMAP4rev1 Debugging mode
. capability
* CAPABILITY IMAP4rev1 NAMESPACE X-VERSION AUTH=EXTERNAL AUTH=LOGIN AUTH=PLAIN
. OK CAPABILITY Completed
. logout
* BYE Session terminating.
. OK LOGOUT Completed
address@hidden:~/src/mailutils/imap4d$ ./imap4d 
--ssl-cert=/home/jas/certs/sj.cert
Oops, secure memory pool already initialized
* OK IMAP4rev1 Debugging mode
. capability
* CAPABILITY IMAP4rev1 NAMESPACE X-VERSION AUTH=EXTERNAL AUTH=LOGIN AUTH=PLAIN
. OK CAPABILITY Completed
. logout
* BYE Session terminating.
. OK LOGOUT Completed
address@hidden:~/src/mailutils/imap4d$ ./imap4d 
--ssl-key=/home/jas/certs/sj.key --ssl-cert=/home/jas/certs/sj.cert
Oops, secure memory pool already initialized
* OK IMAP4rev1 Debugging mode
. capability
* CAPABILITY IMAP4rev1 NAMESPACE X-VERSION STARTTLS AUTH=EXTERNAL AUTH=LOGIN 
AUTH=PLAIN
. OK CAPABILITY Completed
. logout
* BYE Session terminating.
. OK LOGOUT Completed
address@hidden:~/src/mailutils/imap4d$