Re: NNTP over SSL/TLS not working in Seamonkey.

2015-02-02 Thread Richard Falken
Hb wrote:
 
 Perhaps https://bugzilla.mozilla.org/show_bug.cgi?id=966689 ?
 
 What is shown in the Error Console?
 
 Hb
 

I don't think it is related. The security exceptions dialog does not even
show up.

Error console shows nothing regarding this problem. It is just silently
ignored.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: NNTP over SSL/TLS not working in Seamonkey.

2015-02-02 Thread NoOp
On 01/12/2015 04:46 AM, Richard Falken wrote:
 I have performer further tests.
 
 I have tried to connect to news.eternal-september.org using NNTPS without 
 installing the CAcert certificate. It silently drops the connection.
 
 I have installed CAcert's certificates and retried. Then it worked.
 
 No plugins were enabled duting these tests.
 
 My conclusion is, as I had already told, that my Seamonkey is dropping the 
 connections when there is a SSL or TLS certificate problem and gives no 
 warning to the user.
 

It is helpful if you identify to others that you are using:

User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:15.0) Gecko/20120910
SeaMonkey/2.12.1

Sorry, I've no interest in going back in time to help troubleshoot a
2012 version of SeaMonkey:

https://www.mozilla.org/en-US/security/known-vulnerabilities/seamonkey/

I doubt that others will either.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: NNTP over SSL/TLS not working in Seamonkey.

2015-02-02 Thread Hb
Richard Falken wrote:

 I have not been able to connect to any news provider using SSL or TLS with
 Seamonkey yet. I have tried ternal-september, aioe and the mozilla service
 but I always timeout when I try to establish an encrypted connection. I
 suppose this means there is trouble on my end.

Perhaps https://bugzilla.mozilla.org/show_bug.cgi?id=966689 ?

What is shown in the Error Console?

Hb


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: NNTP over SSL/TLS not working in Seamonkey.

2015-01-12 Thread Richard Falken
NoOp wrote:
 SeaMonkey doesn't fail silently when connecting to Eternal-September -
 you should be getting the following message:
 
 Peer's Certificate issuer is not recognized.
 
 unless you've imported the root ca. See:

I know that. I don't have CAcert's certificate but I am not getting a
warning either.

Maybe it is something related to some weird plugin. I will give it a try later.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: NNTP over SSL/TLS not working in Seamonkey.

2015-01-12 Thread Richard Falken

I have performer further tests.

I have tried to connect to news.eternal-september.org using NNTPS without 
installing the CAcert certificate. It silently drops the connection.


I have installed CAcert's certificates and retried. Then it worked.

No plugins were enabled duting these tests.

My conclusion is, as I had already told, that my Seamonkey is dropping the 
connections when there is a SSL or TLS certificate problem and gives no 
warning to the user.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


NNTP over SSL/TLS not working in Seamonkey.

2015-01-11 Thread Richard Falken
Hello.

I have not been able to connect to any news provider using SSL or TLS with
Seamonkey yet. I have tried ternal-september, aioe and the mozilla service
but I always timeout when I try to establish an encrypted connection. I
suppose this means there is trouble on my end.

Do you have any ideas?
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: NNTP over SSL/TLS not working in Seamonkey.

2015-01-11 Thread WaltS48

Richard Falken wrote:

Hello.

I have not been able to connect to any news provider using SSL or TLS with
Seamonkey yet. I have tried ternal-september, aioe and the mozilla service
but I always timeout when I try to establish an encrypted connection. I
suppose this means there is trouble on my end.

Do you have any ideas?




news.mozilla.org Connection security setting should be None, and use 
port 119.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: NNTP over SSL/TLS not working in Seamonkey.

2015-01-11 Thread Richard Falken
WaltS48 wrote:
 news.mozilla.org Connection security setting should be None, and use port 119.

Does that mean news.mozilla.org does not support SSL or TLS?

I was already connecting to those servers with no encryption at all. It is
just that I find my unability to use encryption with servers that are
supposed to provide it... weird.

I have tested some of those services with openssl s_client, and it gives
certificate error (some related to self-signing, some to expired certs). I
wonder is seamonkey just silently fails when an invalid certificate is
presented to it. If that is the case, I would call that a bug.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: NNTP over SSL/TLS not working in Seamonkey.

2015-01-11 Thread Richard Falken
I think I have found the problem.

Excerpt from bug 745133:

 As of today, if a fatal connection error occurrs on a SSL/TLS socket, no
 feedback will be given to the user. This is different from we had in the
 past.

 In my opinion this behaviour is undesirable, as it gives the user the
 impression of a nonworking product.

I think the problem is I have been trying to connect to servers using
invalid certificates and Seamonkey has just decided to drop the connection
without notifying the user. It really gives the impression there is
something not working in either the client or the server.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: NNTP over SSL/TLS not working in Seamonkey.

2015-01-11 Thread NoOp
On 01/11/2015 05:02 AM, Richard Falken wrote:
 WaltS48 wrote:
 news.mozilla.org Connection security setting should be None, and use port 
 119.
 
 Does that mean news.mozilla.org does not support SSL or TLS?
 
 I was already connecting to those servers with no encryption at all. It is
 just that I find my unability to use encryption with servers that are
 supposed to provide it... weird.
 
 I have tested some of those services with openssl s_client, and it gives
 certificate error (some related to self-signing, some to expired certs). I
 wonder is seamonkey just silently fails when an invalid certificate is
 presented to it. If that is the case, I would call that a bug.
 

SeaMonkey doesn't fail silently when connecting to Eternal-September -
you should be getting the following message:

Peer's Certificate issuer is not recognized.

unless you've imported the root ca. See:

1. http://www.eternal-september.org/index.php?showpage=techinfo see
the 2014-04-13 00:00:00 New SSL certificates for HTTPS and NNTPS info
in the box.

2.
http://wiki.cacert.org/FAQ/ImportRootCert?action=showredirect=ImportRootCert

3.
http://wiki.cacert.org/FAQ/BrowserClients?action=showredirect=BrowserClients

4. http://www.cacert.org/index.php?id=3

Once you've imported  accepted the cacert PKI key you should have no
problem connecting to news.eternal-september.org s/ssl.
Port : 563 (encrypted connection NNTPS)
Port : 443 (encrypted connection NNTPS)
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey