[Help-gnutls] Re: GnuTLS 1.5.1 for Windows

[Simon Josefsson]

Ralf Angeli <angeli at caeruleus.net> writes:

>> Which Emacs version is this?
>
> M-x emacs-version RET
> GNU Emacs 22.0.50.1 (i386-mingw-nt5.1.2600) of 2006-09-14 on NEUTRINO
>
> You can download a version of CVS Emacs from June from
> <URL:ftp://alpha.gnu.org/gnu/auctex/>.  I'm intending to upload a
> newer version once pretesting starts.

Thanks, I will try that one.

>> I've had problems reproducing this step,
>> but I think it depends on the Windows version.  How do you send the
>> C-z to the sub-process?
>
> C-d

Ok.

>> Can you send additional data after the TLS
>> connection is established?  After TLS is negotiated, try typing:
>>
>> EHLO foo
>>
>> and see whether it responds or not.
>
> I'm not sure if I understand correctly.  Typing "EHLO foo" before
> typing `C-d' at least didn't work:

No, you'll need to start gnutls-cli, wait for the server to respond
("220 smtp08...") then type:

starttls

wait for the server to ack the request to start TLS ("220 OpenSSL...")
and then type C-d to invoke the TLS layer.  Once it finishes, you are
talking to the server under the encrypted layer.  If you could then
type:

EHLO foo

at that point, and show me the output, I'll know that the TLS layer
actually works properly.

If you get this far, I think it should be possible to get Gnus to work
too.  I haven't managed to run gnutls-cli in a M-x shell successfully
yet, but hopefully the Emacs version you point me at will help me...

/Simon

> c:\foo>gnutls-cli --print-cert --port 25 --starttls smtp.web.de
> gnutls-cli --port 25 --starttls smtp.web.de
> Resolving 'smtp.web.de'...
> Connecting to '217.72.192.157:25'...
>
> - Simple Client Mode:
>
> 220 smtp08.web.de ESMTP WEB.DE V4.107#114 Mon, 25 Sep 2006 20:55:30 +0200
> ehlo neutrino
> 250-smtp08.web.de Hello neutrino [84.165.71.252]
> 250-SIZE 69920427
> 250-PIPELINING
> 250-AUTH PLAIN LOGIN
> 250-STARTTLS
> 250 HELP
> starttls
> 220 OpenSSL/0.9.7beta go ahead
> EHLO foo
> *** Starting TLS handshake
> *** Fatal error: A record packet with illegal version was received.
> *** Handshake has failed
> *** Starting TLS handshake
> *** Fatal error: A record packet with illegal version was received.
> *** Handshake has failed
>   C-c C-c^C
>
> -- 
> Ralf