[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#250801: aeromail: non-obvious certificate validation failure

Package: aeromail
Version: 1.45-1.2
Severity: important


If you install the latest version of uw-imapd in testing it creates a
self-signed SSL certificate.  When you try to login to this IMAP
server using Aeromail it tries to authenticate the certificate (even
with non-SSL connections) and fails.  But it doesn't produce *any*
output mentioning this fact, all you get is exactly the same behaviour
as if you'd entered an incorrect password.

The PHP function imap_last_error() does return a message indicating
this ("Certificate failure for localhost: self signed certificate:
/O=University of Washington IMAP
but that's not being treated any differently by Aeromail to "Can not
authenticate to IMAP server: AUTHENTICATE LOGIN failed".

It would help people track down problems if Aeromail differentiated
between error messages and/or passed them back to the user.


PS.  I mistakenly filed bug #250389 first before tracking down the
true nature of this bug.

-- System Information:
Debian Release: testing/unstable
Architecture: i386 (i686)
Kernel: Linux 2.4.26-1-686-smp
Locale: LANG=en_GB, LC_CTYPE=en_GB

Versions of packages aeromail depends on:
ii  debconf                       1.4.25     Debian configuration management sy
ii  php4                          4:4.3.4-4  A server-side, HTML-embedded scrip
ii  php4-imap                     4:4.3.4-4  IMAP module for php4

-- debconf information excluded

Reply to: