Sorry for delay. Sure I hope to but I've been on vacation. Hope it's okay
to get back in a week or two, otherwise feel free to close and I'll reopen
if necessary.
On Jul 23, 2014 3:09 PM, "Daniel Stenberg" <bagder_at_users.sf.net> wrote:

>
> - *status*: open --> pending-needsinfo
> - *Comment*:
>
> Sean, can you verify if this is indeed the case?
> ------------------------------
>
> * [bugs:#1389] <http://sourceforge.net/p/curl/bugs/1389> SMTP VRFY issued
> even when server doesn't support*
>
> *Status:* pending-needsinfo
> *Created:* Tue Jul 01, 2014 11:56 AM UTC by Sean Atkinson
> *Last Updated:* Mon Jul 07, 2014 08:24 PM UTC
> *Owner:* Steve Holme
>
> Seems that in curl 7.37 the VRFY SMTP command fails even when a server
> (such as sendgrid) doesn't list support for it. Verbose output below
> running on rhel 6.5 linux, suspect this applies since VRFY was introduced
> in 7.34 too.
>
> - Rebuilt URL to: smtp://smtp.sendgrid.net:587/
> - Hostname was NOT found in DNS cache
> - Trying 5.153.47.202...
> - Connected to smtp.sendgrid.net (5.153.47.202) port 587 (#0)
> < 220 ismtpd-023.ams1.sendgrid.net ESMTP service ready
>
> EHLO 23
> < 250-83.140.21.74
> < 250-8BITMIME
> < 250-SIZE 20480000
> < 250-AUTH=PLAIN LOGIN
> < 250-AUTH PLAIN LOGIN
> < 250 STARTTLS
> STARTTLS
> < 220 Begin TLS negotiation now
>
> - successfully set certificate verify locations:
> - CAfile: /etc/pki/tls/certs/ca-bundle.crt
> CApath: none
> - SSL connection using TLSv1.2 / DHE-RSA-AES256-GCM-SHA384
> - Server certificate:
> - subject: OU=Domain Control Validated; CN=*.smtp.sendgrid.net
> - start date: 2014-04-09 23:10:05 GMT
> - expire date: 2016-03-28 18:01:05 GMT
> - issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=
> http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate
> Authority - G2
> - SSL certificate verify ok.
>
> EHLO 23
> < 250-83.140.21.74
> < 250-8BITMIME
> < 250-SIZE 20480000
> < 250-AUTH=PLAIN LOGIN
> < 250 AUTH PLAIN LOGIN
> AUTH LOGIN
> < 334 VXNlcm5hbWU6
> ZnIyNA==
> < 334 UGFzc3dvcmQ6
> amFMYWkzRWN1YTZ1
> < 235 Authentication successful.
> VRFY sean_at_fr24.com
> < 500 Command not implemented
>
> - Command failed: 500
>
> QUIT
> < 221 See you later
>
> - Closing connection 0
>
> ------------------------------
>
> Sent from sourceforge.net because you indicated interest in
> https://sourceforge.net/p/curl/bugs/1389/
>
> To unsubscribe from further messages, please visit
> https://sourceforge.net/auth/subscriptions/
>

---
** [bugs:#1389] SMTP VRFY issued even when server doesn't support**
**Status:** pending-needsinfo
**Created:** Tue Jul 01, 2014 11:56 AM UTC by Sean Atkinson
**Last Updated:** Wed Jul 23, 2014 10:56 AM UTC
**Owner:** Steve Holme
Seems that in curl 7.37 the VRFY SMTP command fails even when a server (such as sendgrid) doesn't list support for it. Verbose output below running on rhel 6.5 linux, suspect this applies since VRFY was introduced in 7.34 too.
* Rebuilt URL to: smtp://smtp.sendgrid.net:587/
* Hostname was NOT found in DNS cache
*   Trying 5.153.47.202...
* Connected to smtp.sendgrid.net (5.153.47.202) port 587 (#0)
< 220 ismtpd-023.ams1.sendgrid.net ESMTP service ready
> EHLO 23
< 250-83.140.21.74
< 250-8BITMIME
< 250-SIZE 20480000
< 250-AUTH=PLAIN LOGIN
< 250-AUTH PLAIN LOGIN
< 250 STARTTLS
> STARTTLS
< 220 Begin TLS negotiation now
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSL connection using TLSv1.2 / DHE-RSA-AES256-GCM-SHA384
* Server certificate:
* 	 subject: OU=Domain Control Validated; CN=*.smtp.sendgrid.net
* 	 start date: 2014-04-09 23:10:05 GMT
* 	 expire date: 2016-03-28 18:01:05 GMT
* 	 issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate Authority - G2
* 	 SSL certificate verify ok.
> EHLO 23
< 250-83.140.21.74
< 250-8BITMIME
< 250-SIZE 20480000
< 250-AUTH=PLAIN LOGIN
< 250 AUTH PLAIN LOGIN
> AUTH LOGIN
< 334 VXNlcm5hbWU6
> ZnIyNA==
< 334 UGFzc3dvcmQ6
> amFMYWkzRWN1YTZ1
< 235 Authentication successful.
> VRFY sean_at_fr24.com
< 500 Command not implemented
* Command failed: 500
> QUIT
< 221 See you later
* Closing connection 0
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to http://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at http://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.