Menu
Reply
  • 26
  • 0
  • 10
unfocused
On our wavelength
285 Views
Message 31 of 53
Flag for a moderator

Re: 0x800CCC0E

Thanks, Tim

I can confirm that my SMTP settings have 'Use same settings as my incoming mail server' highlighted.

I've had problems with openssl as this doesn't appear to have an application interface.  When I enter the text you have supplied into the command window, I get ''openssl' is not recognized as an internal or external command, operable program or batch file.'  Do I have to execute the openssl application and enter the command there?

0 Kudos
Reply
  • 17.91K
  • 990
  • 7.52K
Very Insightful Person
Very Insightful Person
284 Views
Message 32 of 53
Flag for a moderator

Re: 0x800CCC0E

Unless you've added the openssl bin folder to the path you may need to navigate to where you installed it

As a Very Insightful Person, I'm here to share my knowledge. I don't work for Virgin Media.

Click to learn more about VIP

Use Kudos to say thanks

Mark as Helpful Answer if I've helped

0 Kudos
Reply
  • 26
  • 0
  • 10
unfocused
On our wavelength
271 Views
Message 33 of 53
Flag for a moderator

Re: 0x800CCC0E

OK.  Sorry to be thick!  I have done that.  Just to confirm there is nothing in the encrypted message that will identify me or my machine, as these are public posts??

  • 17.91K
  • 990
  • 7.52K
Very Insightful Person
Very Insightful Person
268 Views
Message 34 of 53
Flag for a moderator

Re: 0x800CCC0E

No there isn't

As a Very Insightful Person, I'm here to share my knowledge. I don't work for Virgin Media.

Click to learn more about VIP

Use Kudos to say thanks

Mark as Helpful Answer if I've helped

0 Kudos
Reply
  • 26
  • 0
  • 10
unfocused
On our wavelength
266 Views
Message 35 of 53
Flag for a moderator

Re: 0x800CCC0E

Thought not, but preferred to make sure!  Thanks.  Here's the response to that command:

C:\OpenSSL-Win64\bin>openssl s_client -connect imap.virginmedia.com:993
CONNECTED(00000194)
depth=1 C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2
verify error:num=20:unable to get local issuer certificate
---
Certificate chain
0 s:/C=GB/OU=Domain Control Validated/CN=imap.virginmedia.com
i:/C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G2
1 s:/C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G2
i:/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=GB/OU=Domain Control Validated/CN=imap.virginmedia.com
issuer=/C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G2
---
No client certificate CA names sent
Peer signing digest: SHA256
Server Temp Key: ECDH, P-521, 521 bits
---
SSL handshake has read 3327 bytes and written 370 bytes
Verification error: unable to get local issuer certificate
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: 3E836B441585496950DDA2EDC5CB901E9642817795048695D6E56745F7DD5F8B
Session-ID-ctx:
Master-Key: 03B8E728969DC1F1FB9C115145D0BFBD41FEA6E95B020843C7DBD43AAD5349F91D8272CF6860387C420F20F22B39025F
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1571753174
Timeout : 7200 (sec)
Verify return code: 20 (unable to get local issuer certificate)
Extended master secret: no
---
* OK Virgin Media IMAP4 server ready [ e4c558782VM ].
closed

0 Kudos
Reply
  • 17.91K
  • 990
  • 7.52K
Very Insightful Person
Very Insightful Person
250 Views
Message 36 of 53
Flag for a moderator

Re: 0x800CCC0E

That shows that you are connecting correctly to the server.

If you want to test if the server is responding to commands and then as soon as you see the greeting type

 

a1 logout

 

You can put anything in place of the term a1 BTW - it's a token that's needed before the command 

 

OpenSSL> s_client -connect imap.virginmedia.com:993
CONNECTED(00000180)
depth=2 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2
verify return:1
depth=0 C = GB, OU = Domain Control Validated, CN = imap.virginmedia.com
verify return:1
---
Certificate chain
 0 s:/C=GB/OU=Domain Control Validated/CN=imap.virginmedia.com
   i:/C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G2
 1 s:/C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G2
   i:/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=GB/OU=Domain Control Validated/CN=imap.virginmedia.com
issuer=/C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G2
---
No client certificate CA names sent
Peer signing digest: SHA256
Server Temp Key: ECDH, P-521, 521 bits
---
SSL handshake has read 3327 bytes and written 370 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: E51A1366C03067C96A98D64B8E1F0F5E012FC5C1FC5CBCDC952CFAE3D519AC8C
    Session-ID-ctx:
    Master-Key: F05DE17413E26AE62148952F34546DEC83CD174E5DE0DFE24699B6090CFE139694EB7F9B649D5840C2228D68D1CCC961
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1571759923
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---
* OK Virgin Media IMAP4 server ready [ e4c558782VM ].
a1 logout
* BYE IMAP4 Proxy logging out.
a1 OK Logout completed.
read:errno=0
OpenSSL>

 

I would double check your imap server and port settings and double check SSL/TLS is set as the encryption type.

It's clear that you can reach the server over the correct port.

Tim

Edit - I would stress that we are going to have a problem.  Even if you do test updated IMAP settings, you're not going to be able to make them stick until the SMTP issue is resolved.

Sometimes - I hate Outlook. 😞

As a Very Insightful Person, I'm here to share my knowledge. I don't work for Virgin Media.

Click to learn more about VIP

Use Kudos to say thanks

Mark as Helpful Answer if I've helped

0 Kudos
Reply
  • 26
  • 0
  • 10
unfocused
On our wavelength
243 Views
Message 37 of 53
Flag for a moderator

Re: 0x800CCC0E

Thanks Tim,

I definitely have the correct settings: 

Settings.PNG

But what is Verify return code: 20 (unable to get local issuer certificate)?  Isn't that a problem?

0 Kudos
Reply
  • 17.91K
  • 990
  • 7.52K
Very Insightful Person
Very Insightful Person
232 Views
Message 38 of 53
Flag for a moderator

Re: 0x800CCC0E


@unfocused wrote:

Thanks Tim,

I definitely have the correct settings: 

Settings.PNG

But what is Verify return code: 20 (unable to get local issuer certificate)?  Isn't that a problem?


No - it's an annoyance mind you, and one I've only learnt how to completely resolve this week.

In order to check the certificate chains properly , OpenSSL needs a local copy of the root certificates cacert.pem  This can be downloaded from here:

http://curl.haxx.se/ca/cacert.pem - Download it and copy it somewhere where it's easy to access e.g. c:\

Now it needs to be told where to find the this file.

This can be done in the s_client command itself

s_client -connect imap.virginmedia.com:993 -CAfile c:\cacert.pem

 Alternatively you can add the variable SSL_CERT_FILE=c:\cacert.pem to the List of environment variables.

In the Windows search bar type environment.

The top choice should read "Edit the System Environment Variables - select this.

The old System properties box will open Click Environment Variables

Env.PNG

From this you can add a new system variable

env2.PNG

While you are here you can also add the location of the OpenSSL\bin directory to the PATH variable by double clicking the existing variable which will give you something like this:

pathvar.PNG

You can browse to the location of the OpenSSL\bin directory on your machine to add this to the path.

This will let you use OpenSSL without having to go to the OpenSSL folder every time.

Tim

As a Very Insightful Person, I'm here to share my knowledge. I don't work for Virgin Media.

Click to learn more about VIP

Use Kudos to say thanks

Mark as Helpful Answer if I've helped

0 Kudos
Reply
  • 26
  • 0
  • 10
unfocused
On our wavelength
214 Views
Message 39 of 53
Flag for a moderator

Re: 0x800CCC0E

Thank you, Tim.

I'm not sure whether I need to do everything you've mentioned below.  If this is just to get rid of the return code 20, which you indicate is an issue only with openssl, then is there any point me going through this?  I'm afraid I'm not a techie like you so, once the problem is resolved, I will probably uninstall openssl.

I'm not sure where all this has got me.  On the send, it seems there is a disparity between my credentials and what virginmedia is expecting, though I have made no change to my credentials and they appear to be correct.  Presumably this will have to be thrashed out with the virginmedia tech team.

Do you think that the receive errors are related to this and will be corrected once the send issue has been fixed?

As a final attempt to resolve, do you think there is any value in me removing the account from Outlook and then adding it back in again?  I would have tried this approach already but I was concerned that I may lose all of my emails.  I can back them up to a .pst file, but do I also need to do anything with the .ost file?

Many thanks for your help and advice.

0 Kudos
Reply
  • 26
  • 0
  • 10
unfocused
On our wavelength
181 Views
Message 40 of 53
Flag for a moderator

Re: 0x800CCC0E

As no-one has posted anything for a couple of days, I presume you have moved on to other issues.

HowardML warned me this was a difficult problem, but thanks for trying to resolve it for me.  I know you're all interested volunteers, so appreciate your help and advice.  I'll see whether the virginmedia tech team can find a solution.

0 Kudos
Reply