553289 - [Autoconfig] Can't use smtp.casema.nl because of STARTTLS is not set

Status: RESOLVED INVALID

(Thunderbird :: Account Manager, defect)

Description

[Ludovic Hirlimann [:Usul]]

While testing 3.0.4 I created one of my usual test account on casema. We don't have it on file so it's just guessing the parameters.

Parameters that we Guess :
 server : smtp.casema.nl port 587 (this is new in the past we detected 25, probably a new feature from my ISP - but undocumented).
 Use name and password is selected with the value [e-mail]

This will not work. To make it work you need to set connection security to STARTTLS.

Ben I'm not sure this isn't a duplicate - can you confirm it isn't ?

Comment 1

[Ben Bucksch (:BenB)]

Cert is invalid, it's for *.ziggo.nl (and it's a cheap-o cert, too). That might be why we ignore it, would need more debugging to confirm.

Comment 2

[Ludovic Hirlimann [:Usul]]

(In reply to comment #1)
> Cert is invalid, it's for *.ziggo.nl (and it's a cheap-o cert, too). That might
> be why we ignore it, would need more debugging to confirm.

Ziggo is unfortunatly the new brand name. but email are still on the older domains :-(

Anything I can do ?

Comment 3

[Ben Bucksch (:BenB)]

Yes. Tell ISP to properly configure their SSL servers with certs matching hostnames. If they changed domains, that means they need 2 separate servers with different certs. I didn't invent SSL, but changing customer domains is always a bad idea.

Or do you mean for yourself? Just set it up manually.

Strangely enough, smtp.ziggo.nl doesn't give me STARTTLS either. So, there must be another reason, too.

Comment 4

[Ben Bucksch (:BenB)]

> Strangely enough, smtp.ziggo.nl doesn't give me STARTTLS either.

I meant: smtp.ziggo.nl has STARTTLS (with *.ziggo.nl as CN), but when TB guesses servers to [e-mail], I get smtp.ziggo.nl port 587, no SSL.

Comment 5

[Ben Bucksch (:BenB)]

> Tell ISP to properly configure their SSL servers

Actually, unless I'm mistaken, we can just use smtp.zippo.nl as SMTP server for casema.nl, and the cert would be valid - at least the hostname mismatch wouldn't be a problem.

Comment 6

[Ludovic Hirlimann [:Usul]]

(In reply to comment #5)
> > Tell ISP to properly configure their SSL servers
> 
> Actually, unless I'm mistaken, we can just use smtp.zippo.nl as SMTP server for
> casema.nl, and the cert would be valid - at least the hostname mismatch
> wouldn't be a problem.

Indeed and probbaly true for pop.ziggo.nl too.