SMTP over TLS

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

SMTP over TLS

Andres Fortier-2
Hi list,
         I need to send mails from a mail account that uses SMTP over
TLS. Using the default SimpleSMTPClient I get:

'SMTP Error 530 5.7.0 Must issue a STARTTLS command first 74sm9739777wra'

Is there support in VW to use SMTP adn TLS?

--
Thanks in advance,
                   Andrés

Reply | Threaded
Open this post in threaded view
|

Re: SMTP over TLS

kobetic
Andres Fortier wrote:
> Hi list,
>         I need to send mails from a mail account that uses SMTP over
> TLS. Using the default SimpleSMTPClient I get:
>
> 'SMTP Error 530 5.7.0 Must issue a STARTTLS command first 74sm9739777wra'
>
> Is there support in VW to use SMTP adn TLS?

Nope. We have plain SMTP over plain SSL (aka SMTPS) in 7.5, which works with servers with separate, dedicated port for secure connections. STARTTLS is a way to support both secure and insecure exchanges on the same port and we don't have that yet. That said, it's not that hard to add (see http://www.ietf.org/rfc/rfc2487.txt). However I would highly recommend to switch from SimpleSMTPClient to SMTPClient. I assume you'll need authentication as well, and the simple guy doesn't do that either.

HTH,

Martin


Reply | Threaded
Open this post in threaded view
|

Re: [vwnc] SMTP over TLS

giorgiof
Hi, Martin,

I got same problem (250-STARTTLS not supported) using SMTP on 7.6 trying to connect to gmail SMTP.
Is the hole on the implementation not fixed yet? also on the latest 7.7 beta build? Or there are some good news?

I understand the work going on for Seaside, but this seems basic mail features dating back to 1999. I suppose VW should be able to work with. (btw, if i develop a seaside application and whant to send mail to a gmail smtp, what can I do...)

I know it's not you , but priority. I'm just telling here tat this seems a feature we should have. (small, you says...)

There is other way to connect to gmail smtp avoiding this problem that you are aware of? I knows very little about SMTP stuff.

thanks

giorgio

On Mon, Aug 27, 2007 at 3:52 PM, Martin Kobetic <[hidden email]> wrote:
Andres Fortier wrote:
Hi list,
       I need to send mails from a mail account that uses SMTP over TLS. Using the default SimpleSMTPClient I get:

'SMTP Error 530 5.7.0 Must issue a STARTTLS command first 74sm9739777wra'

Is there support in VW to use SMTP adn TLS?

Nope. We have plain SMTP over plain SSL (aka SMTPS) in 7.5, which works with servers with separate, dedicated port for secure connections. STARTTLS is a way to support both secure and insecure exchanges on the same port and we don't have that yet. That said, it's not that hard to add (see http://www.ietf.org/rfc/rfc2487.txt). However I would highly recommend to switch from SimpleSMTPClient to SMTPClient. I assume you'll need authentication as well, and the simple guy doesn't do that either.

HTH,

Martin




_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: [vwnc] SMTP over TLS

Andres Fortier-2
Hi Giorgio,
                  a couple of days ago we configured a SMTPClient to
send e-mails with gmail smtp using SSL. I don't have the code right
here, but I will tell Emiliano (the guy who actually used the code) to
sent it to you. IIRC you need to load a certificate to avoid a
/Something-Not-In-Trust-List/ exception.

However I do agree that support for TLS is almost a must.

Best regards,
                        Andrés

giorgio ferraris escribió:

> Hi, Martin,
>
> I got same problem (250-STARTTLS not supported) using SMTP on 7.6 trying to
> connect to gmail SMTP.
> Is the hole on the implementation not fixed yet? also on the latest 7.7 beta
> build? Or there are some good news?
>
> I understand the work going on for Seaside, but this seems basic mail
> features dating back to 1999. I suppose VW should be able to work with.
> (btw, if i develop a seaside application and whant to send mail to a gmail
> smtp, what can I do...)
>
> I know it's not you , but priority. I'm just telling here tat this seems a
> feature we should have. (small, you says...)
>
> There is other way to connect to gmail smtp avoiding this problem that you
> are aware of? I knows very little about SMTP stuff.
>
> thanks
>
> giorgio
>
> On Mon, Aug 27, 2007 at 3:52 PM, Martin Kobetic <[hidden email]> wrote:
>
>> Andres Fortier wrote:
>>
>>> Hi list,
>>>        I need to send mails from a mail account that uses SMTP over TLS.
>>> Using the default SimpleSMTPClient I get:
>>>
>>> 'SMTP Error 530 5.7.0 Must issue a STARTTLS command first 74sm9739777wra'
>>>
>>> Is there support in VW to use SMTP adn TLS?
>>>
>> Nope. We have plain SMTP over plain SSL (aka SMTPS) in 7.5, which works
>> with servers with separate, dedicated port for secure connections. STARTTLS
>> is a way to support both secure and insecure exchanges on the same port and
>> we don't have that yet. That said, it's not that hard to add (see
>> http://www.ietf.org/rfc/rfc2487.txt). However I would highly recommend to
>> switch from SimpleSMTPClient to SMTPClient. I assume you'll need
>> authentication as well, and the simple guy doesn't do that either.
>>
>> HTH,
>>
>> Martin
>>
>>
>>
>
_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: [vwnc] SMTP over TLS

giorgiof
Hi, Andres,

thanks a LOT!

Giorgio

On Wed, Jul 2, 2008 at 3:06 PM, Andres Fortier <[hidden email]> wrote:
Hi Giorgio,
                 a couple of days ago we configured a SMTPClient to
send e-mails with gmail smtp using SSL. I don't have the code right
here, but I will tell Emiliano (the guy who actually used the code) to
sent it to you. IIRC you need to load a certificate to avoid a
/Something-Not-In-Trust-List/ exception.

However I do agree that support for TLS is almost a must.

Best regards,
                       Andrés

giorgio ferraris escribió:
> Hi, Martin,
>
> I got same problem (250-STARTTLS not supported) using SMTP on 7.6 trying to
> connect to gmail SMTP.
> Is the hole on the implementation not fixed yet? also on the latest 7.7 beta
> build? Or there are some good news?
>
> I understand the work going on for Seaside, but this seems basic mail
> features dating back to 1999. I suppose VW should be able to work with.
> (btw, if i develop a seaside application and whant to send mail to a gmail
> smtp, what can I do...)
>
> I know it's not you , but priority. I'm just telling here tat this seems a
> feature we should have. (small, you says...)
>
> There is other way to connect to gmail smtp avoiding this problem that you
> are aware of? I knows very little about SMTP stuff.
>
> thanks
>
> giorgio
>
> On Mon, Aug 27, 2007 at 3:52 PM, Martin Kobetic <[hidden email]> wrote:
>
>> Andres Fortier wrote:
>>
>>> Hi list,
>>>        I need to send mails from a mail account that uses SMTP over TLS.
>>> Using the default SimpleSMTPClient I get:
>>>
>>> 'SMTP Error 530 5.7.0 Must issue a STARTTLS command first 74sm9739777wra'
>>>
>>> Is there support in VW to use SMTP adn TLS?
>>>
>> Nope. We have plain SMTP over plain SSL (aka SMTPS) in 7.5, which works
>> with servers with separate, dedicated port for secure connections. STARTTLS
>> is a way to support both secure and insecure exchanges on the same port and
>> we don't have that yet. That said, it's not that hard to add (see
>> http://www.ietf.org/rfc/rfc2487.txt). However I would highly recommend to
>> switch from SimpleSMTPClient to SMTPClient. I assume you'll need
>> authentication as well, and the simple guy doesn't do that either.
>>
>> HTH,
>>
>> Martin
>>
>>
>>
>
_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: [vwnc] SMTP over TLS

Emiliano Pérez-3
Hi Giorgio, Andres.

Ok, you first need the a certificate:
We used a file named 'ThawtePremiumServerCA_b64.txt' located in the
certificate package ('thawte-roots.zip').
You can download it from https://www.thawte.com/roots/, just click on
accept and it will download the package.

Here´s the code we used to load the certificate:

| certificates registry filePath |

registry := Security.X509.X509Registry new.
filePath:= 'correct_path\ThawtePremiumServerCA_b64.txt'.
certificates := Security.X509.CertificateFileReader readFromFile: filePath.
registry addCertificates: certificates.
X509Registry default addCertificates: certificates.

I think that it only has to be evaluated once per image.
You also have to set up the client to use the secure connection before
you send the message, here´s how we used the SMTPClient:

smtpClient := SMTPClient host: 'smtp.gmail.com'.
smtpClient useAuthentication: true.
smtpClient user: (NetUser username: '[hidden email]' password:
'password').
smtpClient useSecureConnection.
smtpClient send: message

That´s all, hope it helps, Emiliano.

giorgio ferraris escribió:

> Hi, Andres,
>
> thanks a LOT!
>
> Giorgio
>
> On Wed, Jul 2, 2008 at 3:06 PM, Andres Fortier
> <[hidden email] <mailto:[hidden email]>>
> wrote:
>
>     Hi Giorgio,
>                      a couple of days ago we configured a SMTPClient to
>     send e-mails with gmail smtp using SSL. I don't have the code right
>     here, but I will tell Emiliano (the guy who actually used the code) to
>     sent it to you. IIRC you need to load a certificate to avoid a
>     /Something-Not-In-Trust-List/ exception.
>
>     However I do agree that support for TLS is almost a must.
>
>     Best regards,
>                            Andrés
>
>     giorgio ferraris escribió:
>     > Hi, Martin,
>     >
>     > I got same problem (250-STARTTLS not supported) using SMTP on
>     7.6 trying to
>     > connect to gmail SMTP.
>     > Is the hole on the implementation not fixed yet? also on the
>     latest 7.7 beta
>     > build? Or there are some good news?
>     >
>     > I understand the work going on for Seaside, but this seems basic
>     mail
>     > features dating back to 1999. I suppose VW should be able to
>     work with.
>     > (btw, if i develop a seaside application and whant to send mail
>     to a gmail
>     > smtp, what can I do...)
>     >
>     > I know it's not you , but priority. I'm just telling here tat
>     this seems a
>     > feature we should have. (small, you says...)
>     >
>     > There is other way to connect to gmail smtp avoiding this
>     problem that you
>     > are aware of? I knows very little about SMTP stuff.
>     >
>     > thanks
>     >
>     > giorgio
>     >
>     > On Mon, Aug 27, 2007 at 3:52 PM, Martin Kobetic
>     <[hidden email] <mailto:[hidden email]>> wrote:
>     >
>     >> Andres Fortier wrote:
>     >>
>     >>> Hi list,
>     >>>        I need to send mails from a mail account that uses SMTP
>     over TLS.
>     >>> Using the default SimpleSMTPClient I get:
>     >>>
>     >>> 'SMTP Error 530 5.7.0 Must issue a STARTTLS command first
>     74sm9739777wra'
>     >>>
>     >>> Is there support in VW to use SMTP adn TLS?
>     >>>
>     >> Nope. We have plain SMTP over plain SSL (aka SMTPS) in 7.5,
>     which works
>     >> with servers with separate, dedicated port for secure
>     connections. STARTTLS
>     >> is a way to support both secure and insecure exchanges on the
>     same port and
>     >> we don't have that yet. That said, it's not that hard to add (see
>     >> http://www.ietf.org/rfc/rfc2487.txt). However I would highly
>     recommend to
>     >> switch from SimpleSMTPClient to SMTPClient. I assume you'll need
>     >> authentication as well, and the simple guy doesn't do that either.
>     >>
>     >> HTH,
>     >>
>     >> Martin
>     >>
>     >>
>     >>
>     >
>     _______________________________________________
>     vwnc mailing list
>     [hidden email] <mailto:[hidden email]>
>     http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> vwnc mailing list
> [hidden email]
> http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
>  

_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: [vwnc] SMTP over TLS

giorgiof
thanks a lot!

ciao

Giorgio

On Wed, Jul 2, 2008 at 5:09 PM, Emiliano Pérez <[hidden email]> wrote:
Hi Giorgio, Andres.

Ok, you first need the a certificate:
We used a file named 'ThawtePremiumServerCA_b64.txt' located in the
certificate package ('thawte-roots.zip').
You can download it from https://www.thawte.com/roots/, just click on
accept and it will download the package.

Here´s the code we used to load the certificate:

| certificates registry filePath |

registry := Security.X509.X509Registry new.
filePath:= 'correct_path\ThawtePremiumServerCA_b64.txt'.
certificates := Security.X509.CertificateFileReader readFromFile: filePath.
registry addCertificates: certificates.
X509Registry default addCertificates: certificates.

I think that it only has to be evaluated once per image.
You also have to set up the client to use the secure connection before
you send the message, here´s how we used the SMTPClient:

smtpClient := SMTPClient host: 'smtp.gmail.com'.
smtpClient useAuthentication: true.
smtpClient user: (NetUser username: '[hidden email]' password:
'password').
smtpClient useSecureConnection.
smtpClient send: message

That´s all, hope it helps, Emiliano.

giorgio ferraris escribió:
> Hi, Andres,
>
> thanks a LOT!
>
> Giorgio
>
> On Wed, Jul 2, 2008 at 3:06 PM, Andres Fortier
> <[hidden email] <mailto:[hidden email]>>
> wrote:
>
>     Hi Giorgio,
>                      a couple of days ago we configured a SMTPClient to
>     send e-mails with gmail smtp using SSL. I don't have the code right
>     here, but I will tell Emiliano (the guy who actually used the code) to
>     sent it to you. IIRC you need to load a certificate to avoid a
>     /Something-Not-In-Trust-List/ exception.
>
>     However I do agree that support for TLS is almost a must.
>
>     Best regards,
>                            Andrés
>
>     giorgio ferraris escribió:
>     > Hi, Martin,
>     >
>     > I got same problem (250-STARTTLS not supported) using SMTP on
>     7.6 trying to
>     > connect to gmail SMTP.
>     > Is the hole on the implementation not fixed yet? also on the
>     latest 7.7 beta
>     > build? Or there are some good news?
>     >
>     > I understand the work going on for Seaside, but this seems basic
>     mail
>     > features dating back to 1999. I suppose VW should be able to
>     work with.
>     > (btw, if i develop a seaside application and whant to send mail
>     to a gmail
>     > smtp, what can I do...)
>     >
>     > I know it's not you , but priority. I'm just telling here tat
>     this seems a
>     > feature we should have. (small, you says...)
>     >
>     > There is other way to connect to gmail smtp avoiding this
>     problem that you
>     > are aware of? I knows very little about SMTP stuff.
>     >
>     > thanks
>     >
>     > giorgio
>     >
>     > On Mon, Aug 27, 2007 at 3:52 PM, Martin Kobetic
>     <[hidden email] <mailto:[hidden email]>> wrote:
>     >
>     >> Andres Fortier wrote:
>     >>
>     >>> Hi list,
>     >>>        I need to send mails from a mail account that uses SMTP
>     over TLS.
>     >>> Using the default SimpleSMTPClient I get:
>     >>>
>     >>> 'SMTP Error 530 5.7.0 Must issue a STARTTLS command first
>     74sm9739777wra'
>     >>>
>     >>> Is there support in VW to use SMTP adn TLS?
>     >>>
>     >> Nope. We have plain SMTP over plain SSL (aka SMTPS) in 7.5,
>     which works
>     >> with servers with separate, dedicated port for secure
>     connections. STARTTLS
>     >> is a way to support both secure and insecure exchanges on the
>     same port and
>     >> we don't have that yet. That said, it's not that hard to add (see
>     >> http://www.ietf.org/rfc/rfc2487.txt). However I would highly
>     recommend to
>     >> switch from SimpleSMTPClient to SMTPClient. I assume you'll need
>     >> authentication as well, and the simple guy doesn't do that either.
>     >>
>     >> HTH,
>     >>
>     >> Martin
>     >>
>     >>
>     >>
>     >
>     _______________________________________________
>     vwnc mailing list
>     [hidden email] <mailto:[hidden email]>
> ------------------------------------------------------------------------
>
> _______________________________________________
> vwnc mailing list
> [hidden email]
> http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
>

_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc