[bug-mailutils] Re: [PATCH] starttls fix

[Simon Josefsson]

Wojciech Polak <address@hidden> writes:

> On Mon, 20 Jan 2003 11:08:23 +0100 Simon Josefsson wrote:
>
>> > > You are right, I must have made some error during testing.  Still,
>> > > enabling starttls when there is no client private key and cert would
>> > > be useful too.
>> >
>> > Who says that we require a private key or a certificate in a client
>> > program? gnu-imap4d and gnu-pop3d are servers, not clients. You can
>> > connect to them with any IMAP/POP3 client, without specifying any
>> > private key or a certificate in your client. Try fetchmail as a test.
>
>> imap4d doesn't seem to advertise STARTTLS unless the cert/key is
>> specified:
>
> Yeap. It's okay. But you asked about a client program
> (see top of the message).

Oops.  I meant server private key and cert there.  Sorry for the
confusion I caused.

Sergey Poznyakoff <address@hidden> writes:

>> imap4d doesn't seem to advertise STARTTLS unless the cert/key is
>> specified:
>
> I guess that's right. What will it do to advertise it if we cannot run
> the TLS negotiation, anyway. Am I missing something?

It is possible to use TLS negotiation without server (and client)
keys/certs.