[Bug 257906] Re: SSL IMAP account sends plaintext passwords in the clear

2008-11-03 Thread Sebastien Bacher
We are closing this bug report as it lacks the information, described in
the previous comments, we need to investigate the problem further.
However, please reopen it if you can give us the missing information and
don't hesitate to submit bug reports in the future.

** Changed in: evolution (Ubuntu)
   Status: Incomplete = Invalid

-- 
SSL IMAP account sends plaintext passwords in the clear
https://bugs.launchpad.net/bugs/257906
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is a bug assignee.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs


[Bug 257906] Re: SSL IMAP account sends plaintext passwords in the clear

2008-10-16 Thread Sebastien Bacher
could you reply to the comments there?

-- 
SSL IMAP account sends plaintext passwords in the clear
https://bugs.launchpad.net/bugs/257906
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is a bug assignee.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs


[Bug 257906] Re: SSL IMAP account sends plaintext passwords in the clear

2008-09-29 Thread Sebastien Bacher
could you send the bug to bugzilla since you get the issue and can reply
to their comments?

-- 
SSL IMAP account sends plaintext passwords in the clear
https://bugs.launchpad.net/bugs/257906
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is a bug assignee.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs


[Bug 257906] Re: SSL IMAP account sends plaintext passwords in the clear

2008-09-29 Thread Sebastien Bacher
do you consider the issue similar to
http://bugzilla.gnome.org/show_bug.cgi?id=531156?

-- 
SSL IMAP account sends plaintext passwords in the clear
https://bugs.launchpad.net/bugs/257906
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is a bug assignee.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs


[Bug 257906] Re: SSL IMAP account sends plaintext passwords in the clear

2008-08-27 Thread Pedro Villavicencio
leaving this as incomplete until it gets forwarded upstream, thanks.

** Changed in: evolution (Ubuntu)
   Status: New = Incomplete

-- 
SSL IMAP account sends plaintext passwords in the clear
https://bugs.launchpad.net/bugs/257906
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is a bug assignee.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs


[Bug 257906] Re: SSL IMAP account sends plaintext passwords in the clear

2008-08-20 Thread Sebastien Bacher
thank you for your bug report, the issue seems to be an upstream could
you open it on bugzilla.gnome.org where people write the code can reply?

** Changed in: evolution (Ubuntu)
   Importance: Undecided = Medium
 Assignee: (unassigned) = Ubuntu Desktop Bugs (desktop-bugs)

-- 
SSL IMAP account sends plaintext passwords in the clear
https://bugs.launchpad.net/bugs/257906
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is a bug assignee.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs


[Bug 257906] Re: SSL IMAP account sends plaintext passwords in the clear

2008-08-14 Thread Lee Maguire
I've run a session with the camel debug output and tried to pull out the
relevent parts:


It does authenticate ok using cram-md5 over an SSL connection:
---

  full_name:received: * OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS AUTH=CRAM-MD5 
AUTH=PLAIN AUTH=LOGIN] imap.example.com IMAP4rev1 2003.339 at Thu, 14 Aug 2008 
15:53:19 +0100 (BST)
sending : B0 CAPABILITY
received: * CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY 
UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND 
LOGIN-REFERRALS AUTH=CRAM-MD5 AUTH=PLAIN AUTH=LOGIN
received: B0 OK CAPABILITY completed
e-data-server-ui-Message: Unable to find password(s) in keyring (Keyring 
reports: No matching results)
e-data-server-ui-Message: Key file does not have key 'imap:__myusername;[EMAIL 
PROTECTED]'
sending : B1 AUTHENTICATE CRAM-MD5
received: + PDI[...the cram-md5 authenication...]Pg==
received: B1 OK [CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS 
BINARY UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND] 
User myusername authenticated


It gets the listing of the folders and subscribed folders OK:
---

received: B2 OK NAMESPACE completed
sending : B3 LIST  *
[etc]
received: * LIST

received: B3 OK LIST completed
sending : B4 LSUB  *
received: * LSUB (\NoInferiors) NIL INBOX
[etc]
received: B4 OK LSUB completed


Then for some reason decides it didn't like the OK response?

CamelException.setv((nil), 303, 'Unexpected OK response from IMAP server: 
B1 OK [CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY 
UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND] User 
myusername authenticated')

Now it attempts to query the sever again (not over SSL), and prompts for a 
password, I click cancel:
-
received: * OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS STARTTLS LOGINDISABLED 
AUTH=CRAM-MD5] imap.example.com IMAP4rev1 2003.339 at Thu, 14 Aug 2008 15:53:35 
+0100 (BST)
sending : C0 CAPABILITY
received: * CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY 
UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND 
LOGIN-REFERRALS STARTTLS LOGINDISABLED AUTH=CRAM-MD5
received: C0 OK CAPABILITY completed
e-data-server-ui-Message: Unable to find password(s) in keyring (Keyring 
reports: No matching results)
e-data-server-ui-Message: Key file does not have key 'imap:[EMAIL PROTECTED]'
sending : C1 LOGOUT
received: * BYE imap.example.com IMAP4rev1 server terminating connection


It does it again, this time I give it the password - since LOGINDISABLED is in 
effect it will be rejected regardless:
---
received: * OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS STARTTLS LOGINDISABLED 
AUTH=CRAM-MD5] imap.example.com IMAP4rev1 2003.339 at Thu, 14 Aug 2008 15:54:01 
+0100 (BST)
sending : C0 CAPABILITY
received: * CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY 
UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND 
LOGIN-REFERRALS STARTTLS LOGINDISABLED AUTH=CRAM-MD5
received: C0 OK CAPABILITY completed
e-data-server-ui-Message: Unable to find password(s) in keyring (Keyring 
reports: No matching results)
e-data-server-ui-Message: Key file does not have key 'imap:[EMAIL PROTECTED]'
sending : C1 LOGIN xxx xxx
received: C1 NO LOGIN failed

-- 
SSL IMAP account sends plaintext passwords in the clear
https://bugs.launchpad.net/bugs/257906
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evolution in ubuntu.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs