nnimap groups failing to connect to server

[Pier]

I have double install in my laptop, one is Ubuntu and the other a newly
installed Debian.

I use gnus regularly on my Ubuntu install. Although I am sharing all (?)
settings, including .authinfo.gpg and .ssh, I cannot access
my nnimap groups on Debian.

Here is the output from the *Messages* buffer for one of my nnimap groups:
"
Opening nnimap server on ***@acuti.net...
Opening connection to mail.wservices.ch via tls...
Opening TLS connection to ‘mail.wservices.ch’...
Opening TLS connection with ‘gnutls-cli --x509cafile
/etc/ssl/certs/ca-certificates.crt -p 993 mail.wservices.ch’...failed
Opening TLS connection with ‘gnutls-cli --x509cafile
/etc/ssl/certs/ca-certificates.crt -p 993 mail.wservices.ch
--protocols ssl3’...failed
Opening TLS connection with ‘openssl s_client -connect
mail.wservices.ch:993 -no_ssl2 -ign_eof’...failed
Opening TLS connection to ‘mail.wservices.ch’...failed
Unable to open server nnimap+***@acuti.net due to: Buffer
*nnimap mail.wservices.ch 993 *nntpd**-31795 has no process
Opening nnimap server on ***@acuti.net...failed:
"

I have checked the "ca-certificates.crt" file for both installs, and they
are identical.

Local folders are read ok and I am using the Ubuntu install for posting
this, as even the smtp server is not working in Debian.

What am I missing?

Thanks in advance for any help!

Pier

[Adam Sjøgren]

Post by Pier
I have double install in my laptop, one is Ubuntu and the other a newly
installed Debian.

Which version of Debian?

Post by Pier
Opening TLS connection to ‘mail.wservices.ch’...
Opening TLS connection with ‘gnutls-cli --x509cafile
/etc/ssl/certs/ca-certificates.crt -p 993 mail.wservices.ch’...failed

If you run this by hand, what error do you get?

Post by Pier
I have checked the "ca-certificates.crt" file for both installs, and they
are identical.
Local folders are read ok and I am using the Ubuntu install for posting
this, as even the smtp server is not working in Debian.

What is the output in *Messages* on the setup that works? Which of the
tls/ssl related commands succeeds?

Post by Pier
What am I missing?

I would start by comparing versions of gnutls and openssl on the two
setups, and by running the command that succeeds by hand on the other
setup, to see what error is returned.

My first guess would be that your Debian installation has stricter
demands on what TLS versions/etc. are accepted.

Although I just tested running:

$ gnutls-cli --x509cafile /etc/ssl/certs/ca-certificates.crt -p 993 mail.wservices.ch

on a Debian stable machine and a Debian unstable one, and both worked,
so my guess might be way off.


Best regards,

Adam

[Pier]

Post by Adam Sjøgren
Which version of Debian?

Post by Pier
Opening TLS connection to ‘mail.wservices.ch’...
Opening TLS connection with ‘gnutls-cli --x509cafile
/etc/ssl/certs/ca-certificates.crt -p 993 mail.wservices.ch’...failed

If you run this by hand, what error do you get?

I have tried running this by hand on my Debian Busting and... gnutils-cli was
missing!

I have installed gnutls-bin and things seem to work now (we'll se if I
can get to send this).

Is not gnutls installed with emacs? I have a compiled version of emacs
25.3 (25.2 in Ubuntu), I installed the depencencies with apt and I
thought this would have been installed (it was in Ubuntu).

Anyway, thanks so much Adam, you have pointed me to the right direction
up to goal!

Pier

[Adam Sjøgren]

Post by Pier
I have tried running this by hand on my Debian Busting and... gnutils-cli was
missing!

Debian Buster (currently testing), I guess you meant :-)

Post by Pier
I have installed gnutls-bin and things seem to work now (we'll se if I
can get to send this).

Nice!

Post by Pier
Is not gnutls installed with emacs?

I don't think so:

· https://packages.debian.org/buster/emacs25
· https://packages.ubuntu.com/artful/emacs25

Post by Pier
I have a compiled version of emacs 25.3 (25.2 in Ubuntu), I installed
the depencencies with apt and I thought this would have been installed
(it was in Ubuntu).

The package in Debian does not depend on the gnutls command-line
utilities.

Newer Emacs versions can be built with libgnutls support, and then the
external utilities shouldn't be necessary, however.

Post by Pier
Anyway, thanks so much Adam, you have pointed me to the right direction
up to goal!

Happy to help.


Best regards,

Adam