1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
|
@PACKAGE@ for Debian
--------------------
mail-user-agent
===============
The following configuration enables you to run Mew as a default mail
user agent of emacsen.
(if (boundp 'mail-user-agent)
(setq mail-user-agent 'mew-user-agent))
(if (boundp 'read-mail-command)
(setq read-mail-command 'mew))
Local mailbox
=============
If you want to use a local mailbox instead of POP, you need the
following configuration.
(setq mew-mailbox-type 'mbox) ;; 'pop is used by default
(setq mew-mbox-command "incm") ;; incm gets mails from maildir or mbox
(setq mew-mbox-command-arg "-u -a") ;; See also incm manual
SSL/TLS
=======
To use SSL/TLS, install the ca-certificates package and the stunnel4
package (or the stunnel package).
By default, in the startup file, the mew-prog-ssl variable is set to
"mewstunnel" (wrapper script for using stunnel4 or stunnel), the
mew-ssl-cert-directory variable is set to "/etc/ssl/certs" (directory
to store CA certificates in), and the mew-ssl-verify-level variable
is set to 2 (verify server's certificate). See also "Mew manual".
(setq mew-prog-ssl (or (executable-find "mewstunnel") "stunnel"))
(setq mew-prog-ssl-arg nil)
;;(setq mew-prog-ssl-arg "ciphers=DEFAULT:@SECLEVEL=2\nsslVersionMin=TLSv1.2\n")
;;(setq mew-prog-ssl-arg "ciphers=DEFAULT:@SECLEVEL=1\nsslVersionMin=TLSv1.2\nsslVersionMax=TLSv1.2\n")
;;(require 'gnutls) ;; gnutls-trustfiles
;;(dolist (file (gnutls-trustfiles)) (setq mew-prog-ssl-arg (concat mew-prog-ssl-arg "CAfile=" file "\n")))
(setq mew-ssl-cert-directory "/etc/ssl/certs")
(setq mew-ssl-verify-level 2)
(setq mew-auto-get nil)
(setq mew-use-cached-passwd t)
(setq mew-passwd-timer-unit 60)
(setq mew-passwd-lifetime 24)
(setq mew-name "FULL NAME")
(setq mew-user "USERNAME")
(setq mew-mail-domain "example.com")
(setq mew-dcc 'me)
(setq mew-proto "+")
;;(setq mew-proto "%")
(setq mew-smtp-server "smtp.example.com")
(setq mew-smtp-user "USERNAME@example.com")
(setq mew-smtp-ssl t)
;;(setq mew-smtp-port "smtp") ;; 25
;;(setq mew-smtp-port 2525)
(setq mew-smtp-port "submission") ;; 587
(setq mew-smtp-ssl-port mew-smtp-port) ;; STARTTLS
;;(setq mew-smtp-ssl-port 465)
(setq mew-pop-server "pop.example.com")
(setq mew-pop-user "USERNAME@example.com")
(setq mew-pop-auth 'pass)
(setq mew-pop-ssl t)
(setq mew-pop-size 0)
(setq mew-imap-server "imap.example.com")
(setq mew-imap-user "USERNAME@example.com")
(setq mew-imap-ssl t)
(setq mew-imap-size 0)
(setq mew-imap-trash-folder "%Trash")
(setq mew-imap-spam-folder "%Spam")
GnuTLS
======
Experimental support for Emacs's built-in GnuTLS can be enabled by
the following configuration.
(setq mew-ssl-default 'native) ;; GnuTLS
;;(setq mew-ssl-default 'tunnel) ;; stunnel
cf. https://groups.google.com/g/mew-ja/c/sSfEPKD_CSM
https://github.com/hrs-allbsd/Mew
Emacs network security is handled at a higher level via
open-network-stream and the Network Security Manager (NSM).
cf. gnutls.el and nsm.el
(setq network-security-level 'medium) ;; For the Network Security Manager (NSM)
;;(setq network-security-level 'high)
(setq gnutls-verify-error nil) ;; The checks are performed by NSM
;;(setq gnutls-verify-error '(("\\.[0-9]+$") (".*" t)))
(setq gnutls-min-prime-bits nil) ;; Use the default GnuTLS value
;;(setq gnutls-min-prime-bits 2048)
(setq gnutls-algorithm-priority nil)
;;(setq gnutls-algorithm-priority "SECURE128:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1")
;;(setq gnutls-algorithm-priority "NORMAL:-VERS-TLS1.3")
(setq gnutls-log-level 0)
;;(setq gnutls-log-level 2) ;; For debugging, look in the *Messages* buffer
See also the following variables which override the gnutls-* variables.
(setq mew-ssl-verify-error nil)
(setq mew-ssl-min-prime-bits 2048)
XOAUTH2
=======
Experimental support for IMAP/SMTP/POP with XOAUTH2 requires
oauth2.el from ELPA and can be enabled by the following configuration.
;; Set to your own OAuth cliend-id and client-secret
(setq mew-auth-oauth-client-id "xxxxxxxxxapps.googleusercontent.com"
mew-auth-oauth-client-secret "xxxxxxxxxxxxxxxxxxxxxxxxxx"
plstore-cache-passphrase-for-symmetric-encryption t
epg-pinentry-mode 'loopback)
(setq mew-config-alist
'(("default"
;; ...
(smtp-auth-list ("XOAUTH2"))
(pop-auth-list ("XOAUTH2"))
(imap-auth-list ("XOAUTH2")))
;; ...
))
See also the variables mew-auth-oauth2-auth-url, mew-auth-oauth2-token-url,
mew-auth-oauth2-resource-url, and mew-auth-oauth2-redirect-url. The
default values are for Gmail.
cf. https://groups.google.com/g/mew-ja/c/Hn9L27ll-eY
https://github.com/yoshinari-nomura/Mew/tree/mew-support-xoauth2
contrib
=======
contrib/*.el files are installed in the site-lisp directory.
-- Tatsuya Kinoshita <tats@debian.org>, Sat, 14 Jan 2023 20:07:27 +0900
|
