Bug 113436 - Starting TLS failed with IMAP account
Summary: Starting TLS failed with IMAP account
Status: RESOLVED UNMAINTAINED
Alias: None
Product: kmail
Classification: Applications
Component: IMAP (show other bugs)
Version: 1.8.91
Platform: unspecified Linux
: NOR normal
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-09-27 15:28 UTC by Andreas Pietzowski
Modified: 2011-11-04 20:30 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Pietzowski 2005-09-27 15:28:45 UTC
Version:           1.8.91 (using KDE 3.4.91 (beta1, >= 20050910), compiled sources)
Compiler:          gcc version 3.3.5 20050117 (prerelease) (SUSE Linux)
OS:                Linux (i686) release 2.6.11.4-21.8-smp

I use KDE-3.4.2 for a long period right now and also got any email over my IMAP-account without problems. Today I compiled KDE-3.5 beta1 and started KMail again. Now when I want to get my IMAP-mails I get a message with

Starting TLS failed

And afterwards I have to enter my password again - which results in the same dialog on and on.... No way to quit that.

I think this is a grave bug before releasing KDE-3.5-final. Thanks for fixing. Nice application anyway!

Andreas
Comment 1 Philip Rodrigues 2005-09-28 22:15:24 UTC
Do you have cyrus SASL installed? What version?
Comment 2 Andreas Pietzowski 2005-10-11 08:34:11 UTC
Yes, cyrus SASL is installed with version 2.1.20-7 on my client. I have no clue what version is running on the IMAP server as I don't have access to that machine. But under KDE 3.4.2 TLS worked pretty fine without an error message.
Comment 3 Michael Nottebrock 2005-11-12 16:14:25 UTC
I'm seeing the same thing ever since KDE 3.4.0 in FreeBSD 4.x - I think it is somehow related to openssl/kssl - FreeBSD 4 ships OpenSSL 0.9.7d 17 Mar 2004 and installing just a slightly newer version (like 0.9.7e) makes the problem go away.

Unfortunately this problem is very hard to debug since there are clues like error messages or helpful debug output to be found anywhere, despite a full debug build of kdepim, kdebase and kdelibs.
Comment 4 Michael Nottebrock 2005-11-12 16:17:51 UTC
I meant to write "*No* clues to be found", obviously.
Comment 5 Michael Nottebrock 2005-11-12 16:29:14 UTC
I have to backpedal a bit - there is some interesting debug output after all:

kio_imap: IMAP4::dispatch - command=85
kio_imap: IMAP4::dispatch - command=48
kio_imap: IMAP4::dispatch - command=49
kio_imap: IMAP4::makeLogin - checking login
kio_imap: IMAP4::makeLogin - alreadyConnected false
kio_imap: myAuth: *
kio_imap: imapParser::parseLoop - unhandledResponse:
kio_imap: * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2005 Double Precision, Inc.  See COPYING for distribution information.
kio_imap:
kio_imap: IMAP4: setHost: capability
kio_imap: 'imap4rev1'
kio_imap: 'uidplus'
kio_imap: 'children'
kio_imap: 'namespace'
kio_imap: 'thread=orderedsubject'
kio_imap: 'thread=references'
kio_imap: 'sort'
kio_imap: 'quota'
kio_imap: 'idle'
kio_imap: 'acl'
kio_imap: 'acl2=union'
kio_imap: 'starttls'
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "PKCS7_content_free"
kio_imap: WARNING: TLS mode setup has failed.  Aborting.

Comment 6 Michael Nottebrock 2005-11-12 16:33:07 UTC
...versus the output with a newer openssl installed:

kio_imap: IMAP4::dispatch - command=85
kio_imap: IMAP4::dispatch - command=48
kio_imap: IMAP4::dispatch - command=49
kio_imap: IMAP4::makeLogin - checking login
kio_imap: IMAP4::makeLogin - alreadyConnected false
kio_imap: myAuth: *
kio_imap: imapParser::parseLoop - unhandledResponse:
kio_imap: * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2005 Double Precision, Inc.  See COPYING for distribution information.
kio_imap:
kio_imap: IMAP4: setHost: capability
kio_imap: 'imap4rev1'
kio_imap: 'uidplus'
kio_imap: 'children'
kio_imap: 'namespace'
kio_imap: 'thread=orderedsubject'
kio_imap: 'thread=references'
kio_imap: 'sort'
kio_imap: 'quota'
kio_imap: 'idle'
kio_imap: 'acl'
kio_imap: 'acl2=union'
kio_imap: 'starttls'
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "PKCS7_content_free"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms_conf"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms_noconf"
kssl: Setting real hostname: lofi.dyndns.org
kssl: KSSL connected OK
DCOP: register 'anonymous-81043' -> number of clients is now 39
kssl: X509Callback: ok = 1 error = 0 depth = 1
kssl: X509Callback: ok = 1 error = 0 depth = 0
kssl: Matching CN=[lofi.dyndns.org] to [lofi.dyndns.org]
kssl: SSL HTTP frame the parent?
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "PKCS7_content_free"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms_conf"
kdecore (KLibLoader): WARNING: KLibrary: Undefined symbol "OpenSSL_add_all_algorithms_noconf"
kssl: SSL connection information follows:
kssl: +-----------------------------------------------
kssl: | Cipher: RC4-MD5
kssl: | Description: RC4-MD5                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=MD5
kssl:
kssl: | Version: TLSv1/SSLv3
kssl: | Strength: 128 of 128 bits used.
kssl: | PEER:
kssl: | Subject: /C=DE/ST=Nordrhein-Westfalen/L=Essen/O=Privat/OU=IMAPS mail server/CN=lofi.dyndns.org/emailAddress=postmaster@lofi.dyndns.org
kssl: | Issuer: /C=DE/ST=Nordrhein-Westfalen/L=Dortmund/O=Michael Nottebrock/CN=Michael Nottebrock/emailAddress=michaelnottebrock@gmx.net
kssl: | Validation: 1
kssl: | Certificate matches IP: true
kssl: +-----------------------------------------------
kio_imap: TLS mode has been enabled.
Comment 7 mjh-kde-bugs 2008-03-06 16:27:11 UTC
I just started seeing this problem with Kmail 1.9.9/KDE 3.5.9 (on Mandriva 2008) with the same set of undefined symbols. Is this a kmail problem or a vendor problem?
Comment 8 Joseph Tate 2008-08-05 18:57:37 UTC
I get this error when I don't have the openssl .so files.  If I install the -devel package that includes the .so files, everything works fine.
Comment 9 Andreas Pietzowski 2011-11-04 20:30:55 UTC
No problems detected in kmail2 so I close it :)