Re: [Question] starttls on wanderlust doesn't work on Emacs24, Windows Vista.

["Herbert J. Skuhra" <hskuhra@eumx.net>]

On 23.07.2012 04:39, Takahiro Yamaguchi wrote:
> Dear Wanderlust users,
>
> I'm Takahiro.
>
> I'm using wanderlust.
>
> I start wanderlust, then connect imaps server which dovecot is 
> running.
> Wanderlust get to be freeze with message "Opening STARTTLS connection
> to `43.bb.cc.dd:993'" on minibuffer.
>
> Could you someone please tell me what point is wrong?
>
> I checked it up on web site and asked the maling list wanderlust
> Japanese,but I couldn't reach to solve it.
>
> My environment is as follows:
>
> (emacs-version)
> "GNU Emacs 24.1.1 (i386-mingw-nt6.0.6002)
>  of 2012-06-10 on MARVIN"
> (wl-version)
> "Wanderlust/2.15.9 (Almost Unreal)"
>
> yama@JPC00095266:~$ uname -a
> CYGWIN_NT-6.0 JPC00095266 1.7.15(0.260/5/3) 2012-05-09 10:25 i686 
> Cygwin
> yama@JPC00095266:~$ gnutls-cli --version
> gnutls-cli (GnuTLS) 2.12.14
> Copyright (C) 2011 Free Software Foundation, Inc.
> License GPLv3+: GNU GPL version 3 or later
> <http://gnu.org/licenses/gpl.html>.
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.
>
> Written by Nikos Mavrogiannopoulos.
> yama@JPC00095266:~$ gnutls-cli -p 993 43.bb.cc.dd
> Resolving '43.bb.cc.dd'...
> Connecting to '43.bb.cc.dd:993'...
> - Ephemeral Diffie-Hellman parameters
>  - Using prime: 1024 bits
>  - Secret key: 1022 bits
>  - Peer's public key: 1024 bits
> - Certificate type: X.509
>  - Got a certificate list of 1 certificates.
>  - Certificate[0] info:
>   - subject
>
> `C=JP,ST=Tokyo,L=Shinagawa-Ku,O=Company,OU=HAD4,CN=roswell.had4.jp.company.com',
> issuer `O=company.com,C=JP,O=Company Corporation,OU=ISS
> Infrastructure,CN=Company Intranet CA 1', RSA key 1024 bits, signed
> using RSA-SHA1, activated `2012-01-27 09:44:03 UTC', expires
> `2015-02-27 14:59:00 UTC', SHA-1 fingerprint
> `3b7e8518ccf228de73ec12a403720df60e5dd023'
> - The hostname in the certificate does NOT match '43.bb.cc.dd'

Why do you use IP-address instead of hostname?

> yama@JPC00095266:~$ cat ~/.mylisp/wlx.el
> (autoload 'wl "wl" "Wanderlust" t)
>
> (setq elmo-imap4-debug t)
>
> (setq elmo-imap4-default-user "yama")
> (setq elmo-imap4-default-authenticate-type 'digest-md5)
> (setq elmo-imap4-default-server "43.bb.cc.dd")
> (setq elmo-imap4-default-port 993)
> (setq elmo-imap4-default-stream-type 'starttls)

You probably want ssl (instead of starttls) here.

> (setq ssl-program-name "C:/cygwin/bin/gnutls-cli.exe")
> (setq ssl-program-arguments '("-p" service host))

Have you tried with "--insecure -p" instead of "-p"?

--
Herbert