4 Oct
2019
4 Oct
'19
10:30 p.m.
Hi,
does anyone operate/know about an smtp/imap server that uses
a self-signed certificate? We'd like to test current rust-core
with it (it should work but is reported to not work) ...
cheers,
holger
4 Oct
4 Oct
11:01 p.m.
not sure, but iirc, these librechat.net addresses were weird.
and probably also deltachat.de which is hosted at the same clickhoster.
On 05.10.2019 00:30, holger krekel wrote:
> Hi,
>
> does anyone operate/know about an smtp/imap server that uses
> a self-signed certificate? We'd like to test current rust-core
> with it (it should work but is reported to not work) ...
>
> cheers,
>
> holger
> _______________________________________________
> delta mailing list -- delta(a)codespeak.net
> To unsubscribe send an email to delta-leave(a)codespeak.net
>
5 Oct
5 Oct
12:02 a.m.
On 10/05/2019 12:30 AM, holger krekel wrote:
Hi,
does anyone operate/know about an smtp/imap server that uses
a self-signed certificate? We'd like to test current rust-core
with it (it should work but is reported to not work) ...
cheers,
holger
_______________________________________________
delta mailing list -- delta(a)codespeak.net
To unsubscribe send an email to delta-leave(a)codespeak.net
Are you looking for a public instance with a public registration process ?
Otherwise, setting up a private Exim/Dovecot pair isn't that much work...
--
Marco
10:10 a.m.
On Sat, Oct 05, 2019 at 02:02 +0200, Marco Vittorini Orgeas wrote:
On 10/05/2019 12:30 AM, holger krekel wrote:
no, we don't even need an account. sorry for not mentioning it.
It's about testing TLS (Transport Layer security) -- it works with valid
certificates but by default we also accept self-signed certs or "invalid
hostnames". So if you know about such imap/smtp servers please send us
the domain -- we are only going to test if delta gets over the TLS
connection.
Hi,
does anyone operate/know about an smtp/imap server that uses
a self-signed certificate? We'd like to test current rust-core
with it (it should work but is reported to not work) ...
Are you looking for a public instance with a public registration process ? Otherwise, setting up a private Exim/Dovecot pair
isn't that much work...
and if you can quickly provide an exim/dovecot install with a self-signed
cert that'd be great ;)
holger
12:29 p.m.
hi!
holger krekel <holger(a)merlinux.eu> writes:
It's about testing TLS (Transport Layer security)
-- it works with valid
certificates but by default we also accept self-signed certs or "invalid
hostnames".
i'm curious about the use case that justifies ignoring the certification
chain. Why does deltachat need to accept invalid certificates?
12:38 p.m.
On 10/05/2019 02:29 PM, drebs wrote:
hi!
holger krekel <holger(a)merlinux.eu> writes:
Do you mean "why it does not show a warning for self-signed certs" as
e.g. Thunderbird does ?
--
Marco
It's about testing TLS (Transport Layer
security) -- it works with valid
certificates but by default we also accept self-signed certs or "invalid
hostnames".
i'm curious about the use case that justifies ignoring the
certification
chain. Why does deltachat need to accept invalid certificates?
_______________________________________________
delta mailing list -- delta(a)codespeak.net
To unsubscribe send an email to delta-leave(a)codespeak.net
1 p.m.
Hey Drebs :)
On Sat, Oct 05, 2019 at 09:29 -0300, drebs wrote:
holger krekel <holger(a)merlinux.eu> writes:
There are countries/entities that do not have easy access
to valid certs. And sometimes there are just lazy sysadmins.
A self-signed cert is not all that bad as it still prevents
data collection if the collector does not also actively
meddle with TLS.
We'd soon like to refine DC's TLS acceptance behaviour and give users
choices on how to deal with TLS invalidities, maybe also a dialogue.
Also, there is a starting effort to create a "provider-db"
(see a preliminary view into the DB here: https://providers.delta.chat )
where users and scripts contribute data so that for many common sites
DC would not accept invalid certs anymore if we know that there should
be a proper one. The upcoming provider-db also serves the purpose
to better guide users through the setup process.
cheers
holger
It's about testing TLS (Transport Layer
security) -- it works with valid
certificates but by default we also accept self-signed certs or "invalid
hostnames".
i'm curious about the use case that justifies ignoring the certification
chain. Why does deltachat need to accept invalid certificates?
3:58 p.m.
On 10/05/2019 12:10 PM, holger krekel wrote:
On Sat, Oct 05, 2019 at 02:02 +0200, Marco Vittorini
Orgeas wrote:
I guess you're probably trying to do a quick test, but consider that a
default Exim installation comes already with a self-signed cert and I
think also Dovecot is initially setup in that way, or can otherwise be
easily pointed to the exim cert in the configuration file.
A virtual setup (VBOX/Docker/etc..) is minutes away and would give you
the benefits of a mock mail server for future repeatable tests.
--
Marco
On 10/05/2019 12:30 AM, holger krekel wrote:
no, we don't even need an
account. sorry for not mentioning it.
It's about testing TLS (Transport Layer security) -- it works with valid
certificates but by default we also accept self-signed certs or "invalid
hostnames". So if you know about such imap/smtp servers please send us
the domain -- we are only going to test if delta gets over the TLS
connection.
Hi,
does anyone operate/know about an smtp/imap server that uses
a self-signed certificate? We'd like to test current rust-core
with it (it should work but is reported to not work) ...
Are you looking for a
public instance with a public registration process ? Otherwise, setting up a private Exim/Dovecot pair
isn't that much work...
and if you can quickly provide an exim/dovecot install
with a self-signed
cert that'd be great ;)
1757
days inactive
1758
days old
7 comments
4 participants
participants (4)
-
B. Petersen -
drebs -
holger krekel -
Marco Vittorini Orgeas