~rjarry/aerc-discuss

17 7

ProtonMail Bridge Certificate Error

Details
Message ID
<2QXea6w8d6yuC8wewG1ljVHxsvz2z7zSBThn4bAv51KQ52uG3QDN0pZb0JRUts8L6728hGdCjXcnVLMCgM3aDT2RYMi2MWps6NKbcPq5JK4=@protonmail.com>
DKIM signature
pass
Download raw message
Hello,

The protonmail bridge generates a self-signed certificate when
configuring an email client.  Instructions are given for other email
clients to manually accept/trust this certificate.  e.g.

https://proton.me/support/protonmail-bridge-clients-windows-thunderbird
(step 4)

How do I do the same with aerc?  When sending an email, I just see
the following error:

"Connection failed: StartTLS: x509: certificate signed by unknown
authority"

Thanks,

 Kyle M.
Details
Message ID
<CNJQP1SPRN64.1ZQ409IVU78SH@marty>
In-Reply-To
<2QXea6w8d6yuC8wewG1ljVHxsvz2z7zSBThn4bAv51KQ52uG3QDN0pZb0JRUts8L6728hGdCjXcnVLMCgM3aDT2RYMi2MWps6NKbcPq5JK4=@protonmail.com> (view parent)
DKIM signature
pass
Download raw message
Hi Kyle,

Kyle M., Oct 12, 2022 at 06:07:
> The protonmail bridge generates a self-signed certificate when
> configuring an email client.  Instructions are given for other email
> clients to manually accept/trust this certificate.  e.g.
>
> https://proton.me/support/protonmail-bridge-clients-windows-thunderbird
> (step 4)
>
> How do I do the same with aerc?  When sending an email, I just see
> the following error:
>
> "Connection failed: StartTLS: x509: certificate signed by unknown
> authority"

you should try to follow this guide:

https://man.sr.ht/~rjarry/aerc/providers/protonmail.md
Details
Message ID
<4yRE3XHX81MrWsM9KOFgPGBoCfXgv4BJ23kx3qy7Nz0O656Gnc5KFHIAH8i1xhUafplN7vlwOzFynEkxfYPnttOjYNrUJwiJSyYhsiWuQBw=@protonmail.com>
In-Reply-To
<CNJQP1SPRN64.1ZQ409IVU78SH@marty> (view parent)
DKIM signature
pass
Download raw message
Hi Jerry,

> you should try to follow this guide:
> 
> https://man.sr.ht/~rjarry/aerc/providers/protonmail.md

Thanks.  I'm using debian 11, which seems to use a different trust 
store.  I've followed this guide to convert protonmail's certificate 
to x509 format and add the proton bridge certificate to my trust store:

https://ubuntu.com/server/docs/security-trust-store

With starttls enabled in aerc, I still get the following error:

"Connection failed: StartTLS: x509: certificate signed by unknown 
authority"

Perhaps, I'm missing something still?

The wiki suggests trying SSL, but the proton bridge explicitly says
to use STARTTLS security.  Regardless, attempting SSL I get this error:

"Connection failed: smtp.DialTLS: tls: first record does not look like 
a TLS handshake".
Details
Message ID
<GpWHy6MIfbsNigYtCldashF9Z_esDY7ThcXKXzxIgnTzRcM_0OhsVxyMMXIYhWYapmECwQ_DiAqc0wKDwfS_Mq1DrxAYxdU4Ag55PufQW_c=@protonmail.com>
In-Reply-To
<4yRE3XHX81MrWsM9KOFgPGBoCfXgv4BJ23kx3qy7Nz0O656Gnc5KFHIAH8i1xhUafplN7vlwOzFynEkxfYPnttOjYNrUJwiJSyYhsiWuQBw=@protonmail.com> (view parent)
DKIM signature
pass
Download raw message
Sorry, *Robin!

Also, I realized, you can change the security in the proton bridge to 
SSL. Updating that, and aerc's configuration to SSL resulted in a 
similar certificate error:

"Connection failed: smtp.DialTLS: x509: certificate signed by unknown 
authority"
Details
Message ID
<CNK7Y473OB2Z.2RCWQV7T94GP2@marty>
In-Reply-To
<GpWHy6MIfbsNigYtCldashF9Z_esDY7ThcXKXzxIgnTzRcM_0OhsVxyMMXIYhWYapmECwQ_DiAqc0wKDwfS_Mq1DrxAYxdU4Ag55PufQW_c=@protonmail.com> (view parent)
DKIM signature
pass
Download raw message
Kyle M., Oct 12, 2022 at 18:20:
> Sorry, *Robin!
>
> Also, I realized, you can change the security in the proton bridge to 
> SSL. Updating that, and aerc's configuration to SSL resulted in a 
> similar certificate error:
>
> "Connection failed: smtp.DialTLS: x509: certificate signed by unknown 
> authority"

sorry I don't use protonmail. Maybe someone can help in the mailing
list. I know we have some proton users.
Tristan Partin <tristan@neon.tech>
Details
Message ID
<CSQK6K6JMB1Q.9FX25XO63119@c3po>
In-Reply-To
<CNK7Y473OB2Z.2RCWQV7T94GP2@marty> (view parent)
DKIM signature
missing
Download raw message
On Wed Oct 12, 2022 at 3:15 PM CDT, Robin Jarry wrote:
> sorry I don't use protonmail. Maybe someone can help in the mailing
> list. I know we have some proton users.

I use ProtonMail. I have gotten it partially setup. I can now read
emails, but I can't send. I have gotten past the certificate error, but
now I am stuck in "Sending..." forever. Nothing in the logs either.

Sometimes I just hate ProtonMail. Proprietary protocols...

Note that this email is coming from my work email account (gmail). aerc
has worked flawlessly with this account.

-- 
Tristan Partin
Neon (https://neon.tech)
Tim Hume <tim@nomuka.com>
Details
Message ID
<CSQN6H3ILXZS.1JPPNEPHNIFFU@Timothys-Mac-mini.local>
In-Reply-To
<CSQK6K6JMB1Q.9FX25XO63119@c3po> (view parent)
DKIM signature
pass
Download raw message
ProtonMail bridge works fine here. Here's my accounts.conf (with
passwords **** out). The password is what is shown in the bridge app.

[Home]
source              = imap://tim%40nomuka.com:***********@127.0.0.1:1143
outgoing            = smtps+plain://tim%40nomuka.com:***********@127.0.0.1:1025
default             = INBOX
from                = Tim Hume <tim@nomuka.com>
copy-to             = Sent
check-mail          = 1m
enable-folders-sort = true
folders-sort        = INBOX,Drafts,Sent,Archive,Spam,Trash
cache_headers       = false
Tristan Partin <tristan@neon.tech>
Details
Message ID
<CSURBFZN0QOX.JT6P2M2GIXIM@c3po>
In-Reply-To
<CSQN6H3ILXZS.1JPPNEPHNIFFU@Timothys-Mac-mini.local> (view parent)
DKIM signature
missing
Download raw message
With your snippet, I was able to get it working. Thanks for your help.
What a process...
-- 
Tristan Partin
Neon (https://neon.tech)
Timothy Hume <timhume@posteo.net>
Details
Message ID
<CSUS75SXD6OG.2R79VC78NW0AV@Timothys-Mac-mini.local>
In-Reply-To
<CSURBFZN0QOX.JT6P2M2GIXIM@c3po> (view parent)
DKIM signature
pass
Download raw message
Tristan Partin, May 25, 2023 at 05:32:
> With your snippet, I was able to get it working. Thanks for your help.
> What a process...

In the last few days I've moved off ProtonMail onto Posteo. Aerc works
well with Posteo, and the gpg support works well too. The one downside
compared to ProtonMail is that Posteo don't let users use their own
domains.

Cheers,

Tim
Details
Message ID
<bdd36057-1056-4fa3-a332-72b104b22067@ferdinandy.com>
In-Reply-To
<CSUS75SXD6OG.2R79VC78NW0AV@Timothys-Mac-mini.local> (view parent)
DKIM signature
missing
Download raw message
2023. máj. 24. 22:14:37 Timothy Hume <timhume@posteo.net>:

> Tristan Partin, May 25, 2023 at 05:32:
>> With your snippet, I was able to get it working. Thanks for your help.
>> What a process...
>
> In the last few days I've moved off ProtonMail onto Posteo. Aerc works
> well with Posteo, and the gpg support works well too. The one downside
> compared to ProtonMail is that Posteo don't let users use their own
> domains.
>
> Cheers,
> > Tim

Hey guys,

if you have the time, I think future protonmail users would appreciate a 
wiki update as I guess the current page is missing some info?

Thanks,
Bence
Details
Message ID
<CSUSEYAZYKVZ.10U0ZTCH5YI8S@ringo>
In-Reply-To
<CSUS75SXD6OG.2R79VC78NW0AV@Timothys-Mac-mini.local> (view parent)
DKIM signature
pass
Download raw message
Timothy Hume, May 24, 2023 at 22:13:
> In the last few days I've moved off ProtonMail onto Posteo. Aerc works
> well with Posteo, and the gpg support works well too. The one downside
> compared to ProtonMail is that Posteo don't let users use their own
> domains.

Just shimming in :) There are plenty of other email hosting providers.

https://drewdevault.com/2020/06/19/Mail-service-provider-recommendations.html

I would also recommend Fastmail which is a nice alternative to Gmail.
Timothy Hume <timhume@posteo.net>
Details
Message ID
<CSUSKNQAP8HS.1M9670L793ALB@Timothys-Mac-mini.local>
In-Reply-To
<CSUSEYAZYKVZ.10U0ZTCH5YI8S@ringo> (view parent)
DKIM signature
pass
Download raw message
Robin Jarry, May 25, 2023 at 06:24:
>
> Just shimming in :) There are plenty of other email hosting providers.
>
> https://drewdevault.com/2020/06/19/Mail-service-provider-recommendations.ht=
> ml
>
> I would also recommend Fastmail which is a nice alternative to Gmail.

Sorry, I didn't mean to be putting in a plug per se for Posteo - just
reporting that it works and was easy enough to set up.

I'm using that service's automatic pgp encryption of incoming Email
using the user's public key. I notice that every now and then I get a
PGP encrypted Email which aerc doesn't automatically decrypt when I view
it.

I know one of these "decryptable" Emails will arrive in my inbox in
about three hours time, so I'm going to save it and try and hunt down
what is going on.

Cheers,

Tim
Details
Message ID
<CSUT674TS33K.2QQ6ASVSVTPOL@c3po>
In-Reply-To
<bdd36057-1056-4fa3-a332-72b104b22067@ferdinandy.com> (view parent)
DKIM signature
pass
Download raw message
I will put something together.

-- 
Tristan Partin
https://tristan.partin.io
Details
Message ID
<CSV2ZGMQAXR1.2UHBGCMVUCK62@c3po>
In-Reply-To
<CSUT674TS33K.2QQ6ASVSVTPOL@c3po> (view parent)
DKIM signature
pass
Download raw message
I guess the only other problem I have with ProtonMail is that the emails
display out of order. Like I have emails from 2021 near the top.
Wondering if I need to enable some of the sort UI options...

-- 
Tristan Partin
https://tristan.partin.io
Details
Message ID
<CSV4DD32UBUF.2PTTTNS1VMF4K@mashenka>
In-Reply-To
<CSV2ZGMQAXR1.2UHBGCMVUCK62@c3po> (view parent)
DKIM signature
missing
Download raw message
On Thu May 25, 2023 at 06:41, Tristan Partin wrote:
> I guess the only other problem I have with ProtonMail is that the emails
> display out of order. Like I have emails from 2021 near the top.
> Wondering if I need to enable some of the sort UI options...


Yeah, :sort -r date is probably what you are looking for



-- 
+36305425054
bence.ferdinandy.com
Details
Message ID
<CSV72FXXUM0C.3QMB14RR064A@ringo>
In-Reply-To
<CSV4DD32UBUF.2PTTTNS1VMF4K@mashenka> (view parent)
DKIM signature
pass
Download raw message
Bence Ferdinandy, May 25, 2023 at 07:46:
> On Thu May 25, 2023 at 06:41, Tristan Partin wrote:
> > I guess the only other problem I have with ProtonMail is that the emails
> > display out of order. Like I have emails from 2021 near the top.
> > Wondering if I need to enable some of the sort UI options...
>
> Yeah, :sort -r date is probably what you are looking for

You may also try:

    [ui]
    force-client-threads = true
Details
Message ID
<CSVS0K6O7M3U.29GADWUUFJQLW@c3po>
In-Reply-To
<CSV72FXXUM0C.3QMB14RR064A@ringo> (view parent)
DKIM signature
pass
Download raw message
On Thu May 25, 2023 at 2:53 AM CDT, Robin Jarry wrote:
> Bence Ferdinandy, May 25, 2023 at 07:46:
> > On Thu May 25, 2023 at 06:41, Tristan Partin wrote:
> > > I guess the only other problem I have with ProtonMail is that the emails
> > > display out of order. Like I have emails from 2021 near the top.
> > > Wondering if I need to enable some of the sort UI options...
> >
> > Yeah, :sort -r date is probably what you are looking for
>
> You may also try:
>
>     [ui]
>     force-client-threads = true

I tried both of these. Apparently sorting is not supported. I get a
message in the status bar telling me so.

[ui:account=Personal]
force-client-threads = true

That didn't make a difference. I don't get it. Curse Proton Mail once
again for creating an incomplete and crappy bridge.

-- 
Tristan Partin
https://tristan.partin.io
Timothy Hume <timhume@posteo.net>
Details
Message ID
<CSVWGQF5DATS.1OUILD575ZFO6@Timothys-Mac-mini.local>
In-Reply-To
<CSVS0K6O7M3U.29GADWUUFJQLW@c3po> (view parent)
DKIM signature
pass
Download raw message
Tristan Partin, May 26, 2023 at 10:18:
>
> I tried both of these. Apparently sorting is not supported. I get a
> message in the status bar telling me so.
>
> [ui:account=3DPersonal]
> force-client-threads =3D true
>
> That didn't make a difference. I don't get it. Curse Proton Mail once
> again for creating an incomplete and crappy bridge.
>

I recall running into this issue. What I had, when I used ProtonMail is
this in aerc.conf:

sort="-r date"

But now that you mention it, I suspect it might not have worked and I
just got used to whatever the default order was.

Depending on how desperate you are, you could always download all the
imap messages over the bridge and store them locally, and then simply
point aerc to look at the local mail directory. Though it seems a lot of
hoops to jump through just to get sorting working the way you want it.

Cheers,

Tim
Reply to thread Export thread (mbox)