[Help-gnutls] Re: Key usage violation in certificate

[Simon Josefsson]

Daniel Kahn Gillmor <dkg at fifthhorseman.net> writes:

> On 05/30/2009 03:03 PM, Roland Winkler wrote:
>> I am sorry for my ignorance. Is this something I can do locally, or
>> is this a command that I need to run on the remote SMTP server I am
>> trying to contact? If I can run this command locally, how do I
>> specify the remote server? Is there anything else I can do locally?
>> (I've made gnutls-cli more verbose and it gave me a lot of
>> information, though in the end nothing appeared useful to me to
>> resolve this problem.)
>
> You can try this:
>
> echo QUIT | gnutls-cli --print-cert --starttls --port 25 foo.bar.com
>
>
> If that doesn't work (i'm having difficulty getting it to behave as i
> would expect right now)

gnutls-cli doesn't understand SMTP, so you would have to do:

gnutls-cli --print-cert --starttls --port 25 foo.bar.com
...
STARTTLS
^D
...

Where ^D is control-d (i.e., EOF).  On Windows, it is ^Z.

/Simon