Bug 417098

Summary:	smpt.web.de refuses TSL/SSL connections on 587 with SSL: handshake error - wrong version number.
Product:	[Applications] kmailtransport	Reporter:	stakanov.s
Component:	general	Assignee:	kdepim bugs <kdepim-bugs>
Status:	RESOLVED WORKSFORME
Severity:	normal	CC:	volkmar_S
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Other
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description stakanov.s 2020-02-03 10:49:13 UTC

SUMMARY


STEPS TO REPRODUCE
1. Setup smtp with web.de. Login, SSL 587
2. send a mail
3. get the error. 


OBSERVED RESULT
Sending mail fails in all cases when protocol TSL/SSL is choosen, no matter if the 587 port or the 465 port is chosen. While 495 aborts silently (just the sending fails) TLS/SSL with 587 gives more indication:
Trasporto del messaggio non riuscito. Errore durante l'handshake SSL: 

error:1408F10B:SSL routines:ssl3_get_record:wrong version number 
After some tries kmailtrasport crashes. (POP3 resources akonadi crashed).

EXPECTED RESULT
TLS/SSL is offered as a service and should work with kmailtransport.

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: Opensuse Leap 15.1 with KDE Plasma 
(available in About System)
KDE Plasma Version: 5.12.8
KDE Frameworks Version: 5.55.0
Qt Version: 5.9.7

ADDITIONAL INFORMATION
unmodified stock version, previous functionality proven and normal.

Comment 1 stakanov.s 2020-02-03 10:50:37 UTC

> While 495 aborts silently 

is a typo and should read port 465

Comment 2 Volkmar 2020-11-15 14:50:39 UTC

I have also trouble to send emails to the web.de server:

Server: smtp.web.de
encryption: STARTTLS
Port: 587
Autorization:PLAIN

according web.de help web page.

I tried many possible configurations but get no accessto send a email to send web.de -server.

Please can you check the configuration of the KMail programm-
Thanks a lot.

Comment 3 stakanov.s 2020-11-15 15:11:32 UTC

Well I have currently the check working with:
STARTTLS on 587
PLAIN 

server smtp.web.de

Please try to log into the web.de account directly. 
There is a menu setting I think that you have to "confirm". 
I then did change all the account to 2 factor authorization with U2F and nitrokey.
After saving it worked. 
If it is actually based on this with you too (changing and then saving) please report back that I can close this as invalid. If it does not, please report back as it is till valid.
There are a few changes I did still (I shifted to opensuse 15.2 and back), I did install unbound as recursive server for dns.
But first I would go for checking the account setting page of webde and change somthing and back and then save.

Comment 4 Christophe Marin 2020-11-23 09:42:53 UTC

Changing status until we receive some feedback.