Bug 113436

Do you have cyrus SASL installed? What version?

Yes, cyrus SASL is installed with version 2.1.20-7 on my client. I have no clue what version is running on the IMAP server as I don't have access to that machine. But under KDE 3.4.2 TLS worked pretty fine without an error message.

I'm seeing the same thing ever since KDE 3.4.0 in FreeBSD 4.x - I think it is somehow related to openssl/kssl - FreeBSD 4 ships OpenSSL 0.9.7d 17 Mar 2004 and installing just a slightly newer version (like 0.9.7e) makes the problem go away.

Unfortunately this problem is very hard to debug since there are clues like error messages or helpful debug output to be found anywhere, despite a full debug build of kdepim, kdebase and kdelibs.

I meant to write "*No* clues to be found", obviously.

I have to backpedal a bit - there is some interesting debug output after all:

kio_imap: IMAP4::dispatch - command=85
kio_imap: IMAP4::dispatch - command=48
kio_imap: IMAP4::dispatch - command=49
kio_imap: IMAP4::makeLogin - checking login
kio_imap: IMAP4::makeLogin - alreadyConnected false
kio_imap: myAuth: *
kio_imap: imapParser::parseLoop - unhandledResponse:
kio_imap: * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2005 Double Precision, Inc.  See COPYING for distribution information.
kio_imap:
kio_imap: IMAP4: setHost: capability
kio_imap: 'imap4rev1'
kio_imap: 'uidplus'
kio_imap: 'children'
kio_imap: 'namespace'
kio_imap: 'thread=orderedsubject'
kio_imap: 'thread=references'
kio_imap: 'sort'
kio_imap: 'quota'
kio_imap: 'idle'
kio_imap: 'acl'
kio_imap: 'acl2=union'
kio_imap: 'starttls'
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "PKCS7_content_free"
kio_imap: WARNING: TLS mode setup has failed.  Aborting.

...versus the output with a newer openssl installed:

kio_imap: IMAP4::dispatch - command=85
kio_imap: IMAP4::dispatch - command=48
kio_imap: IMAP4::dispatch - command=49
kio_imap: IMAP4::makeLogin - checking login
kio_imap: IMAP4::makeLogin - alreadyConnected false
kio_imap: myAuth: *
kio_imap: imapParser::parseLoop - unhandledResponse:
kio_imap: * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2005 Double Precision, Inc.  See COPYING for distribution information.
kio_imap:
kio_imap: IMAP4: setHost: capability
kio_imap: 'imap4rev1'
kio_imap: 'uidplus'
kio_imap: 'children'
kio_imap: 'namespace'
kio_imap: 'thread=orderedsubject'
kio_imap: 'thread=references'
kio_imap: 'sort'
kio_imap: 'quota'
kio_imap: 'idle'
kio_imap: 'acl'
kio_imap: 'acl2=union'
kio_imap: 'starttls'
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "PKCS7_content_free"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms_conf"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms_noconf"
kssl: Setting real hostname: lofi.dyndns.org
kssl: KSSL connected OK
DCOP: register 'anonymous-81043' -> number of clients is now 39
kssl: X509Callback: ok = 1 error = 0 depth = 1
kssl: X509Callback: ok = 1 error = 0 depth = 0
kssl: Matching CN=[lofi.dyndns.org] to [lofi.dyndns.org]
kssl: SSL HTTP frame the parent?
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "PKCS7_content_free"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms_conf"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms_noconf"
kssl: SSL connection information follows:
kssl: +-----------------------------------------------
kssl: | Cipher: RC4-MD5
kssl: | Description: RC4-MD5                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=MD5
kssl:
kssl: | Version: TLSv1/SSLv3
kssl: | Strength: 128 of 128 bits used.
kssl: | PEER:
kssl: | Subject: /C=DE/ST=Nordrhein-Westfalen/L=Essen/O=Privat/OU=IMAPS mail server/CN=lofi.dyndns.org/emailAddress=postmaster@lofi.dyndns.org
kssl: | Issuer: /C=DE/ST=Nordrhein-Westfalen/L=Dortmund/O=Michael Nottebrock/CN=Michael Nottebrock/emailAddress=michaelnottebrock@gmx.net
kssl: | Validation: 1
kssl: | Certificate matches IP: true
kssl: +-----------------------------------------------
kio_imap: TLS mode has been enabled.

I just started seeing this problem with Kmail 1.9.9/KDE 3.5.9 (on Mandriva 2008) with the same set of undefined symbols. Is this a kmail problem or a vendor problem?

I get this error when I don't have the openssl .so files.  If I install the -devel package that includes the .so files, everything works fine.

No problems detected in kmail2 so I close it :)