Peter Gutmann cryptlib security toolkit mailinglist

Topwiz | 1 Feb 04:28

Re: Error Sending TLS SMTP email to servers that are not GMail


Here is the extended error message:

Unexpected <Unknown type> (50) packet, expected handshake (22)                                                                                                                                                                                                 

--

-- 
View this message in context: http://old.nabble.com/Error-Sending-TLS-SMTP-email-to-servers-that-are-not-GMail-tp33230840p33241037.html
Sent from the Cryptlib mailing list archive at Nabble.com.

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

headers

Florian Weimer | 1 Feb 11:05

x


--

-- 
Florian Weimer                <fweimer <at> bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

headers

Peter Gutmann | 1 Feb 17:48

Re: Error Sending TLS SMTP email to servers that are not GMail

Topwiz <rsmith <at> trusthss.com> writes:

>Here is the extended error message:
>
>Unexpected <Unknown type> (50) packet, expected handshake (22)

That looks like an ASCII character, are you sure you're connecting on an SSL
port?

Peter.

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

headers

Geir Ståle Eidissen | 2 Feb 10:19

cryptGetAttribute - what to use for cryptObject parameter to get error information

A call to cryptImportCert fails ( CRYPT_ERROR_BADDATA -32) and I want to get more information using CRYPT_ATTRIBUTE_ERRORLOCUS ect.

The problem is that I have no valid object for cryptGetAttribute so the calls to get errorlocus, errortype and errormessage fails, returning -1 (CRYPT_ERROR_PARAM1. )

I have tried using CRYPT_UNUSED as the object, but that fails too.

How can I find what's wrong with the certificate I try to import (pem-format, base64 encoded wrapped in ----- BEGIN CERTIFICATE-----,----- END CERTIFICATE----- ) .

Using Cryptlib 3.4.1

--

Geir S. Eidissen

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

headers

Geir Ståle Eidissen | 2 Feb 13:52

Problem reading b64 encoded certificate

I have narrowed it down to that it is the base64 decoding that reports CRYPT_ERROR_BADDATA when a certificate is base64encoded without linefeeds and there is no b64padding.

IF the encoded certificate has b64 padding ( = or == at the end) it works fine:

-----BEGIN CERTIFICATE-----

MIIE […]lxsaxft0Q==

-----END CERTIFICATE-----

When decoding this certificate, the last call to decodeBase64chunk results in outByteCount being 1 or 2 depending on the padding, so it returns OK_SPECIAL that tells base64decode() that end of data is reached. Note that there are no linefeeds in the base64encoded data.

But if there is no padding, the base64decode() function fails.

----- BEGIN CERTIFICATE -----

[…] p1TB3zKyHB1avxusOpgVxDM

-----END CERTIFICATE-----

Because in the last call to decodeBase64chunk() the outByteCount = 3, so base64decode continues to read and trigs the check in base64.c line 749 that allows only lines of 127 bytes or less.

This was no problem in cryptlib 3.2, and the certificate is OK.

Is this something that can be corrected?

--

Geir S. Eidissen

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

headers

Peter Gutmann | 3 Feb 06:13

Re: cryptGetAttribute - what to use for cryptObject parameter to get error information

=?iso-8859-1?Q?Geir_St=E5le_Eidissen?= <geir.eidissen <at> medilink.com> writes:

>How can I find what's wrong with the certificate I try to import (pem-format,
>base64 encoded wrapped in ----- BEGIN CERTIFICATE-----,----- END
>CERTIFICATE----- ) .

Can you send me a copy of the cert, preferably zipped in order to preserve any
formatting irregularities that mailers might mangle?

Peter.

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

headers

Topwiz | 3 Feb 14:40

Re: Error Sending TLS SMTP email to servers that are not GMail


I changed my prorgam to connect to the mail server the normal Winsock way,
send EHLO and get the response:

250-xc38.mail.ovh.net Hello [216.66.99.194]
250-SIZE 104857600
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-AUTH NTLM
250-8BITMIME
250-BINARYMIME
250 CHUNKING

Then I have the following cryptlib code:

// Cryptlib constants
Constant Long CRYPT_OK                                     =  0
Constant Long CRYPT_UNUSED                              = -101
Constant Long CRYPT_SESSION_SSL                      = 3
Constant Long CRYPT_SESSINFO_ACTIVE                = 6001
Constant Long CRYPT_SESSINFO_NETWORKSOCKET  = 6014

// Initialize the Library
ll_RetVal = cryptInit()

// Create the session
ll_RetVal = cryptCreateSession(il_Session, CRYPT_UNUSED, CRYPT_SESSION_SSL)

// Set the socket
ll_RetVal = cryptSetAttribute(il_Session, CRYPT_SESSINFO_NETWORKSOCKET,
iul_socket) 

// Activate the session
ll_RetVal = cryptSetAttribute(il_Session, CRYPT_SESSINFO_ACTIVE, 1) 

The return from this call is:  -16 Internal consistency check failed

--

-- 
View this message in context: http://old.nabble.com/Error-Sending-TLS-SMTP-email-to-servers-that-are-not-GMail-tp33230840p33256685.html
Sent from the Cryptlib mailing list archive at Nabble.com.

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

headers

Topwiz | 3 Feb 14:55

Re: Error Sending TLS SMTP email to servers that are not GMail


I discovered I should send STARTTLS after EHLO and get this response:

220 2.0.0 SMTP server ready

But the the cryptlib session activate gives the same error.

Topwiz wrote:
> 
> My program is written in PowerBuilder and uses the latest copy of cl32.dll
> to send email. It works perfectly with GMail but when used with other
> servers that require TLS it fails. PowerBuilder is very similar to VB6 in
> how it calls .dll functions so I went by the example for that.
> 
> The error is returned from the call to activate the session. The error is
> -32 "Bad/unrecognised data format".
> 
> Here is the code, minus the error handling:
> 
> ll_RetVal = cryptInit()
> ll_RetVal = cryptCreateSession(ll_Session, CRYPT_UNUSED,
> CRYPT_SESSION_SSL)
> ll_RetVal = cryptSetAttributeString(ll_Session,
> CRYPT_SESSINFO_SERVER_NAME, ls_server, Len(ls_server))
> ll_RetVal = cryptSetAttribute(ll_Session, CRYPT_SESSINFO_SERVER_PORT,
> lui_port)
> ll_RetVal = cryptSetAttribute(ll_Session, CRYPT_SESSINFO_ACTIVE, 1)
> 
> The variables that start with ll_ are Long, ls_ are String and lui_ are
> UnsignedInteger. Long is a signed 4 byte number and UnsignedInteger is a
> unsigned 2 byte number.
> 
> Thanks in advance,
> Roland
> 

--

-- 
View this message in context: http://old.nabble.com/Error-Sending-TLS-SMTP-email-to-servers-that-are-not-GMail-tp33230840p33256731.html
Sent from the Cryptlib mailing list archive at Nabble.com.

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

headers

Peter Gutmann | 10 Feb 11:54

Re: Problem reading b64 encoded certificate

=?iso-8859-1?Q?Geir_St=E5le_Eidissen?= <geir.eidissen <at> medilink.com> writes:

>I have narrowed it down to that it is the base64 decoding that reports
>CRYPT_ERROR_BADDATA when a certificate is base64encoded without linefeeds and
>there is no b64padding.

Having seen the files, the bigger problem is that this data is supposed to be
in PEM base64 format but there are no line breaks in it, it's just one
continuous text string so neither of the two are valid.  It's actually just
coincidence that cryptlib decodes the first one (with the padding), since the
code is shared with generic base64-decoding code for databases that don't
handle binary data.

Peter.

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

headers

Smith, Roland | 10 Feb 14:13

Re: Problem reading b64 encoded certificate

Peter,

The change you made fixed the problem! I had to make a couple small changes to my program and now it works great.

If you can send me the final build that would be great.

Thanks,
Roland

-----Original Message-----
From: cryptlib-bounces <at> mbsks.franken.de [mailto:cryptlib-bounces <at> mbsks.franken.de] On Behalf Of
Peter Gutmann
Sent: Friday, February 10, 2012 5:54 AM
To: cryptlib <at> mbsks.franken.de; geir.eidissen <at> medilink.com
Subject: Re: [Cryptlib] Problem reading b64 encoded certificate

=?iso-8859-1?Q?Geir_St=E5le_Eidissen?= <geir.eidissen <at> medilink.com> writes:

>I have narrowed it down to that it is the base64 decoding that reports
>CRYPT_ERROR_BADDATA when a certificate is base64encoded without linefeeds and
>there is no b64padding.

Having seen the files, the bigger problem is that this data is supposed to be
in PEM base64 format but there are no line breaks in it, it's just one
continuous text string so neither of the two are valid.  It's actually just
coincidence that cryptlib decodes the first one (with the padding), since the
code is shared with generic base64-decoding code for databases that don't
handle binary data.

Peter.

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

_______________________________________________
Cryptlib mailing list
Cryptlib <at> mbsks.franken.deAdministration via Mail: cryptlib-request <at> mbsks.franken.de
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

5	March 2012
11	February 2012
5	January 2012
2	December 2011
4	November 2011
4	October 2011
2	September 2011
14	August 2011
5	July 2011
2	June 2011
10	May 2011
4	March 2011
3	February 2011
2	January 2011
12	December 2010
1	November 2010
4	October 2010
9	September 2010
4	August 2010
1	July 2010
3	June 2010
9	May 2010
9	April 2010
17	March 2010
16	February 2010
1	December 2009
4	October 2009
30	September 2009
10	August 2009
10	July 2009
12	June 2009
12	May 2009
35	April 2009
3	March 2009
5	February 2009
6	January 2009
11	November 2008
22	October 2008
19	September 2008
18	August 2008
20	July 2008
12	June 2008
10	May 2008
8	April 2008
3	March 2008
16	February 2008
35	January 2008
10	December 2007
6	November 2007
4	October 2007
2	September 2007
8	August 2007
10	July 2007
5	June 2007
13	May 2007
7	April 2007
17	March 2007
36	February 2007
8	January 2007
8	December 2006
34	November 2006
31	October 2006
58	September 2006
36	August 2006
44	July 2006
31	June 2006
45	May 2006
32	April 2006
26	March 2006
15	February 2006
52	January 2006
17	December 2005
62	November 2005
53	October 2005
47	September 2005
35	August 2005
26	July 2005
40	June 2005
86	May 2005
59	April 2005
42	March 2005
46	February 2005
50	January 2005
67	December 2004
34	November 2004
54	October 2004
101	September 2004
90	August 2004
36	July 2004
23	June 2004
56	May 2004
22	April 2004
85	March 2004
81	February 2004
57	January 2004
35	December 2003
43	November 2003
76	October 2003
55	September 2003
62	August 2003
17	July 2003

Mon	Tue	Wed	Thu	Fri	Sat	Sun

		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29