On Sun, Jul 02, 2006 at 07:37:54PM +0300, Marko Mäkelä wrote: > Indeed, replacing --with-ssl=gnutls in DEB_CONFIGURE_EXTRA_FLAGS > with --with-ssl=openssl does the trick. I hope you can find out > what gnutls is doing differently from openssl.
it seems gnutls can open a new encrypted connection on your server. But it can't do it with the TLS protocol, try the following commands: gnutls-cli -s -p 1025 your.mailserver.com at prompt enter the following command (one for each prompt): EHLO example.com STARTTLS Ctrl-D The handshake negocation fails. Now try with the following command: gnutls-cli -s --protocols ssl3.0 -p 1025 your.mailserver.com at prompt enter the following command (one for each prompt): EHLO example.com STARTTLS Ctrl-D You get the server certificate, now look at the protocol version used. it seems msmtp can't connect to server which use SSL 3.0 protocol. A solution might be to link against libgnutls-openssl to add support for openssl 3.0 compatibility layer. Cheers -- Make a wish, it might come true.