**** BEGIN LOGGING AT Tue Oct 09 02:59:59 2018
Oct 09 12:23:42 <eqw> Hello. Is it possible to fix SSL on n900, like curl https://google.com ?
Oct 09 12:24:21 <sicelo> i have been unable tuse my Exchange account on N900 since Sept. 20. The same account works just fine from an Android device. The microsoft analyzer tool does not work on it. i am suspecting a certificate issue, but having a difficult time figuring out which certificates i need to have.
Oct 09 12:25:09 <sicelo> eqw: curl --capath /etc/certs/common-ca should work
Oct 09 12:27:30 <sicelo> re:exchange - the server is mail.jwpub.org, in case someone has a chance to look into certs i may need. unfortunately i am not able to get assistance from the administrators (the cons of using an ancient device).
Oct 09 12:33:51 <sicelo> N900 just reports a not-very helpful "Error communicating with Exchange Server"
Oct 09 12:58:08 <eqw> sicelo: thank you!
Oct 09 12:58:25 <sicelo> worked?
Oct 09 12:58:31 <eqw> yes
Oct 09 12:58:47 <sicelo> cool
Oct 09 13:01:32 <eqw> but it doesn't with https://login.yota.ru
Oct 09 13:03:28 <sicelo> i'd be glad if someone can test this for me on their N900, cmcli -T common-ca -v eas.jwpub.org:443
Oct 09 13:05:10 <sicelo> eqw: cmcli is happy about your site, at least.  
Oct 09 13:09:41 <totalizator> uh, can I export all SMS/MMS messages from n900 to gmail?
Oct 09 13:10:02 <KotCzarny> you can get your sms from sqlite db in ~
Oct 09 13:10:10 <KotCzarny> as for importing to gmail..
Oct 09 13:10:13 <totalizator> I have a faint memory that this was possible
Oct 09 13:10:48 <KotCzarny> maybe via sharing to some email address
Oct 09 13:10:53 <totalizator> KotCzarny: oh, right, still not bad
Oct 09 13:11:04 <KotCzarny> in which case you send them as emails to your account
Oct 09 18:56:12 <sicelo> i'd be glad if someone can test this for me on their N900, cmcli -T common-ca -v eas.jwpub.org:443
Oct 09 18:58:00 <KotCzarny> should it return anything?
Oct 09 18:58:04 <KotCzarny> it prints nothing
Oct 09 18:59:29 <sicelo> prints nothing for me too, which i think is odd. it should say whether it is able to verify the cert correctly or not, aiui
Oct 09 18:59:54 <KotCzarny> yeah, it prints OK for google.com
Oct 09 19:01:33 <sicelo> thanks for checking for me. i was afraid i borked my device
Oct 09 19:02:50 <KotCzarny> try: cmcli -T common-ca -v -d eas.jwpub.org:443
Oct 09 19:02:53 <sicelo> that's an important email account for me, and i'm stuck now that N900 can't access the account. imap/pop aren't enabled on the server. and unfortunately, n900 browsers all can't open the web page either
Oct 09 19:03:09 <KotCzarny> erm, nvm, wrong syntax
Oct 09 19:04:04 <sicelo> i've tried the -d before .. doesn't seem to work with -v
Oct 09 19:04:44 <KotCzarny> i can hint you to run: strace cmcli -T common-ca -v eas.jwpub.org:443
Oct 09 19:05:26 <KotCzarny> read(3, 0xcf778, 5)                     = -1 ECONNRESET (Connection reset by peer)
Oct 09 19:05:26 <KotCzarny> shutdown(3, 2 /* send and receive */)   = -1 ENOTCONN (Transport endpoint is not connected)
Oct 09 19:05:36 <KotCzarny> it basically gets connection reset
Oct 09 19:05:56 <KotCzarny> which means the other side doesnt like what n900 sends to them
Oct 09 19:06:01 <KotCzarny> write(3, "\26\3\1\0P\1\0\0L\3\1[\274\373\273*\316\203\330\333\222?\30\351S$\233)ZhN\271"..., 85) = 85
Oct 09 19:07:19 * sicelo isn't in the mood to get an android just yet
Oct 09 19:07:31 <KotCzarny> maybe some kind of proxy at home?
Oct 09 19:07:49 <KotCzarny> or grab some el-cheapo server at ovh
Oct 09 19:08:23 <KotCzarny> they offer 6usd/month for 250mbit bw, 2TB hdd, dedicated machines (arm based)
Oct 09 19:09:06 <sicelo> what would it help me with?
Oct 09 19:09:21 <KotCzarny> setting external proxy to help n900 get around the world
Oct 09 19:09:55 <sicelo> mitmproxy for example? or any other solutions?
Oct 09 19:10:13 <KotCzarny> even your own mail server
Oct 09 19:10:38 <KotCzarny> to collate your mail, which doesnt fuss around when it comes to n900 
Oct 09 19:11:23 <sicelo> but i won't be able to pickup mail from this account ... although maybe i should try davmail
Oct 09 19:16:13 <KotCzarny> try: openssl s_client -state -connect eas.jwpub.org:443
Oct 09 19:16:38 <KotCzarny> remote server simply drops the connection when it tries to use sslv2/3
Oct 09 19:16:59 <KotCzarny> or even sooner
Oct 09 19:18:03 <KotCzarny> https://pastebin.com/raw/WscURR6K
Oct 09 19:18:47 <sicelo> i have a newer openssl, so mine does go through, but fails with unable to verify vertificate
Oct 09 19:18:50 <KotCzarny> same command on laptop gets to certificate exchange
Oct 09 19:19:18 <sicelo> adding -CApath /etc/certs/common-ca works
Oct 09 19:19:43 <KotCzarny> OpenSSL 0.9.8zf 19 Mar 2015
Oct 09 19:20:04 <KotCzarny> not for me
Oct 09 19:20:05 <KotCzarny> :)
Oct 09 19:20:15 <KotCzarny> they just hate old protocols
Oct 09 19:20:26 <KotCzarny> and cut them short
Oct 09 19:20:44 <sicelo> 1.1.0h-4
Oct 09 19:21:47 <sicelo> that's from jonwil. if there was a way to make all of maemosec work with this newer openssl
Oct 09 19:26:55 <sicelo> N900 is 10 years next year. :-)
Oct 09 19:32:12 <sparre> Backporting newer SSL/TLS libraries to N900/Maemo would be nice.
Oct 09 19:35:17 <bencoh> :)
Oct 09 19:54:59 <sicelo> it would be nice, indeed. i am not technically able. do we have someone who could offer? 
Oct 09 19:56:22 <sicelo> jonwill took on part of the job (hence the openssl 1.1.0h)
**** ENDING LOGGING AT Wed Oct 10 02:59:59 2018