starttls + gnutls-cli problems

[Nikolaus Rath]

Hello,

I have a problem with accessing an IMAP server using starttls. My select
method is

 gnus-secondary-select-methods '(
                                 (nnimap ""
                                         (nnimap-server-address "ebox.rath.org")
                                         (nnimap-stream starttls)
                                         (nnimap-logout-timeout 1.0)
                                         (nnir-search-engine imap)))

When I attempt to connect to this server, I get the following in
*Messages*:

,----
| imap: Connecting to ebox.rath.org...
| Opening STARTTLS connection to `ebox.rath.org:143'...done
| imap: Connecting with STARTTLS...
| STARTTLS negotiation failed: *** Starting TLS handshake
| - Peer's certificate issuer is unknown
| - Peer's certificate is NOT trusted
| - The hostname in the certificate matches 'ebox.rath.org'.
| *** Verifying server certificate failed...
| *** Fatal error: Error in the certificate.
| *** Handshake has failed
| 
| Process imap<2> exited abnormally with code 1
| 
| imap: Connecting with STARTTLS...failed
| imap: Connecting to ebox.rath.org...failed
| Couldn't open nnimap:
`----

However, if I manually execute gnutls-cli, everything works fine:

,----
| # gnutls-cli -s ebox.rath.org -p 143
| WARNING: gnome-keyring:: couldn't connect to: /tmp/keyring-Ak9iJF/pkcs11: No 
such file or directory
| Processed 152 CA certificate(s).
| Resolving 'ebox.rath.org'...
| Connecting to '173.255.235.238:143'...
| 
| - Simple Client Mode:
| 
| * OK ebox Cyrus IMAP4 v2.2.13-Debian-2.2.13-19squeeze3build0.10.04.1 server 
ready
`----


Does anyone have a suggestion of how to debug this further? Is there a
way to show the exact commandline that starttls is using to start
gnutls-cli?


Thanks,

   -Nikolaus

-- 
 »Time flies like an arrow, fruit flies like a Banana.«

  PGP fingerprint: 5B93 61F8 4EA2 E279 ABF6  02CF A9AD B7F8 AE4E 425C