A while back, I got a Gmail account and enjoyed having it. I was, however, disappointed in the SSL requirement that kept it from being usable with my GoldMine. Gmail, like a number of other e-mail providers, has elected to REQUIRE SSL for their POP3 server.

To correct this and enable me to use these account(s) with GoldMine, I downloaded a free tool called Stunnel from this page

I found I also needed a couple of supporting files.
I downloaded all three items to a local folder I called c:\stunnel\ and created a text file in the folder. This file need to be named stunnel.conf. I put the following text into this file:

client=yes
[pop3]
accept=9995
connect=pop.gmail.com:995
[smtp]
accept=225
connect=smtp.gmail.com:25

…and then I ran Stunnel.exe.

Lastly, I added my Gmail address to GoldMine like I would any other e-mail address other than the fact that both the SMTP and POP3 servers are 127.0.0.1 and I had to go into the advanced area and modify the ports used by both pop3 and smtp to match what I defined in my stunnel.conf file (pop3=9995 and smtp=225 *note the additional digits!).

Finally, I had to go the Gmail account on the Gmail web page and go to my settings area and enable pop3 access. I found that enabling it for ‘all messages than come in from now on’ was the best option.
That was it. Now, as long as I run stunnel on my machine, I can use my Gmail accounts within GoldMine just like any other e-mail accounts!

NOTE: An informative thread in the GoldMine support forums that offers more recent information on this topic can be found here.

  1. I’m trying
    I’ll put the consult in the frontrange forum too.

    I follow the instructions above step by step

    Finally I received the message :

    Se ha producido un error de protocolo al iniciar la sesiรณn o recuperar mensajes

    -ERR [AUTH] Username and password not accepted

    The Stunnel Log :

    2009.03.03 14:08:19 LOG5[3392:3972]: stunnel 4.21 on x86-pc-mingw32-gnu with OpenSSL 0.9.8g 19 Oct 2007
    2009.03.03 14:08:19 LOG5[3392:3972]: Threading:WIN32 SSL:ENGINE Sockets:SELECT,IPv6
    2009.03.03 14:08:19 LOG5[3392:1500]: No limit detected for the number of clients
    2009.03.03 14:17:46 LOG5[3392:3416]: pop3 accepted connection from 127.0.0.1:2644
    2009.03.03 14:17:47 LOG5[3392:3416]: pop3 connected remote server from 192.168.2.3:2645
    2009.03.03 14:17:48 LOG5[3392:3416]: Connection closed: 41 bytes sent to SSL, 130 bytes sent to socket
    2009.03.03 14:19:52 LOG5[3392:3184]: pop3 accepted connection from 127.0.0.1:2661
    2009.03.03 14:19:52 LOG5[3392:3184]: pop3 connected remote server from 192.168.2.3:2662
    2009.03.03 14:19:53 LOG5[3392:3184]: Connection closed: 41 bytes sent to SSL, 130 bytes sent to socket
    2009.03.03 14:37:19 LOG5[3392:2712]: pop3 accepted connection from 127.0.0.1:2962
    2009.03.03 14:37:19 LOG5[3392:2712]: pop3 connected remote server from 192.168.2.3:2963
    2009.03.03 14:37:21 LOG5[3392:2712]: Connection closed: 41 bytes sent to SSL, 130 bytes sent to socket
    2009.03.03 14:37:27 LOG5[3392:1568]: pop3 accepted connection from 127.0.0.1:2964
    2009.03.03 14:37:27 LOG5[3392:1568]: pop3 connected remote server from 192.168.2.3:2965
    2009.03.03 14:37:28 LOG5[3392:1568]: Connection closed: 41 bytes sent to SSL, 130 bytes sent to socket

    I put the screenshots :

    [URL=http://img21.imageshack.us/my.php?image=greenshot20090303143836.jpg][IMG]http://img21.imageshack.us/img21/9960/greenshot20090303143836.th.jpg[/IMG][/URL]
    [URL=http://img9.imageshack.us/my.php?image=greenshot20090303143819.jpg][IMG]http://img9.imageshack.us/img9/7746/greenshot20090303143819.th.jpg[/IMG][/URL]
    [URL=http://img16.imageshack.us/my.php?image=greenshot20090303143806.jpg][IMG]http://img16.imageshack.us/img16/7514/greenshot20090303143806.th.jpg[/IMG][/URL]
    [URL=http://img16.imageshack.us/my.php?image=greenshot20090303141801.jpg][IMG]http://img16.imageshack.us/img16/2952/greenshot20090303141801.th.jpg[/IMG][/URL]
    [URL=http://img11.imageshack.us/my.php?image=greenshot20090303141654.jpg][IMG]http://img11.imageshack.us/img11/3477/greenshot20090303141654.th.jpg[/IMG][/URL]
    [URL=http://img16.imageshack.us/my.php?image=greenshot20090303141644.jpg][IMG]http://img16.imageshack.us/img16/218/greenshot20090303141644.th.jpg[/IMG][/URL]
    [URL=http://img9.imageshack.us/my.php?image=greenshot20090303144107.jpg][IMG]http://img9.imageshack.us/img9/1411/greenshot20090303144107.th.jpg[/IMG][/URL]

    I put a screenshot of other of my account for comparing

    Thanks
    Excuse my language. I’m from Canary Islands

  2. I am running GM 6.7 and attempting t use yahoo as my mail server. I have downloaded and installed Stunnel 4.26 and have modified the stunnel.conf

    cert = stunnel.pem
    socket = l:TCP_NODELAY=1
    socket = r:TCP_NODELAY=1

    client = yes

    [pop3s]
    accept = 995
    connect = plus.pop.mail.yahoo.com:995

    [imaps]
    accept = 993
    connect = 143

    [ssmtp]
    accept = 465
    connect = plus.smtp.mail.yahoo.com:465

    I have configured the GM email client for pop/smtp to 127.0.0.1 and set the ports at 995 and 465. and put in the credential provided by yahoo for username and password.

    folllowing are my Stunnel logs:
    stunnel 4.26 on x86-pc-mingw32-gnu with OpenSSL 0.9.8i 15 Sep 2008
    Threading:WIN32 SSL:ENGINE Sockets:SELECT,IPv4
    No limit detected for the number of clients
    pop3s accepted connection from 127.0.0.1:1275
    pop3s connected remote server from 192.168.2.104:1276
    SSL_connect: 14094412: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate
    Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket

    Any ideas?

    Regards, Rudy

  3. hamachi’s ini file doesn’t mean much to me.. I typically just use the options settings within the program to find the option relating to blocking/unblocking generic windows services or something to that effect. I forget the exact text of the option there, sorry.

  4. Doug,

    I’m trying to use a VPN (Hamachi).. to connect to my offsite server… All seems to work accept Stunnel/Goldmine email pop3 and gmail..

    Without the VPN I can login to a remote desktop and it works fine… but when I use the VPN connection I can not download gmail… other email accounts work fine.

    I get the following Error: Timed out waiting for a response from the server.

    This is my log file:
    2008.11.17 18:17:22 LOG5[3864:3916]: stunnel 4.21 on x86-pc-mingw32-gnu with OpenSSL 0.9.8g 19 Oct 2007
    2008.11.17 18:17:22 LOG5[3864:3916]: Threading:WIN32 SSL:ENGINE Sockets:SELECT,IPv6
    2008.11.17 18:17:22 LOG5[3864:356]: No limit detected for the number of clients
    2008.11.17 18:17:41 LOG5[3864:3828]: pop3s accepted connection from 127.0.0.1:1668
    2008.11.17 18:18:42 LOG3[3864:3828]: SSL_accept: Peer suddenly disconnected
    2008.11.17 18:18:42 LOG5[3864:3828]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
    2008.11.17 18:30:00 LOG5[3864:3068]: pop3s accepted connection from 127.0.0.1:1756
    2008.11.17 18:31:08 LOG3[3864:3068]: SSL_accept: Peer suddenly disconnected
    2008.11.17 18:31:08 LOG5[3864:3068]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
    2008.11.17 18:41:28 LOG5[3864:2688]: pop3s accepted connection from 127.0.0.1:1795
    2008.11.17 18:42:29 LOG3[3864:2688]: SSL_accept: Peer suddenly disconnected
    2008.11.17 18:42:29 LOG5[3864:2688]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
    2008.11.17 18:43:58 LOG5[3864:2512]: pop3s accepted connection from 127.0.0.1:1801
    2008.11.17 18:45:02 LOG3[3864:2512]: SSL_accept: Peer suddenly disconnected
    2008.11.17 18:45:02 LOG5[3864:2512]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket

    Do I need to adjust something in the VPN software?

    Thanks, Mike

  5. what does your stunnel.conf look like? It may be that you were using port 25 and now need to go to 465 or.. ? Sometimes when ISP’s move over to SSL-only requirements, they leave port 25 available for a long time to allow for slow-response time from customers.

  6. starting yesterday, Goldmine is getting the error “a protocol error occurred in logging in or retrieving messages” and then “-ERR problem retrieving messages’. Been using stunnel for some time, but now two machines are having a problem with att.yahoo as they are likely making changes at their servers.. and ideas to make this work? Again, had been using stunnel successfully for some time. Thanks for the product and helping!

  7. looks like something external is cutting off communications between stunnel and the gmal server. Router? ISP? Firewall? Antivirus? Has anything in that area changed recently for you?

  8. My Stunnel and Gmail with gm6.7 has been working fine for well over a couple of years… Just today I can’t send email. Get “The socket was disconnected unexpectedly”

    This is my Log file:

    2008.10.21 19:44:35 LOG5[1208:1744]: stunnel 4.21 on x86-pc-mingw32-gnu with OpenSSL 0.9.8g 19 Oct 2007
    2008.10.21 19:44:35 LOG5[1208:1744]: Threading:WIN32 SSL:ENGINE Sockets:SELECT,IPv4
    2008.10.21 19:44:35 LOG5[1208:332]: No limit detected for the number of clients
    2008.10.21 19:45:58 LOG5[1208:1272]: ssmtp accepted connection from 127.0.0.1:1532
    2008.10.21 19:46:08 LOG5[1208:1272]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
    2008.10.21 19:50:50 LOG5[1208:1304]: pop3s accepted connection from 127.0.0.1:1574
    2008.10.21 19:50:50 LOG5[1208:1304]: pop3s connected remote server from 192.168.0.122:1575
    2008.10.21 19:50:57 LOG5[1208:1304]: Connection closed: 90 bytes sent to SSL, 3111 bytes sent to socket
    2008.10.21 19:53:55 LOG5[1208:344]: ssmtp accepted connection from 127.0.0.1:1620
    2008.10.21 19:54:05 LOG5[1208:344]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
    2008.10.21 19:56:02 LOG5[1208:1656]: ssmtp accepted connection from 127.0.0.1:1622
    2008.10.21 19:56:12 LOG5[1208:1656]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket

    Any help would be greatly appreciated.

    Mike

  9. Sounds like either your windows firewall or some firewall/email ‘protection’ in your anti-virus tool is killing the connection shortly after it’s made. That config should work — and it appears that GoldMine is configured properly too since it’s connecting.

    Look around for other ‘security’ on the machine and adjust as needed.

    What antivirus do you use?

  10. Doug,
    I am using GM 6.7.50123. My ISP went to gmail about 2 months ago and I have not been able to configure stunnel to work yet. I can get it send, but not retrieve, My stunnel.cong file reads:
    client=yes
    [pop3]
    accept=9995
    connect=pop.gmail.com:995
    [smtp]
    accept=465
    connect=smtp.gmail.com:465

    My log file reads:
    2008.10.17 19:55:29 LOG5[1096:336]: stunnel 4.25 on x86-pc-mingw32-gnu with OpenSSL 0.9.8h 28 May 2008
    2008.10.17 19:55:29 LOG5[1096:336]: Threading:WIN32 SSL:ENGINE Sockets:SELECT,IPv4
    2008.10.17 19:55:29 LOG5[1096:1328]: No limit detected for the number of clients
    2008.10.17 19:57:21 LOG5[1096:1128]: pop3s accepted connection from 127.0.0.1:1855
    2008.10.17 19:57:34 LOG3[1096:1128]: SSL_accept: Peer suddenly disconnected
    2008.10.17 19:57:34 LOG5[1096:1128]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
    2008.10.17 19:58:13 LOG5[1096:1192]: pop3s accepted connection from 127.0.0.1:1856
    2008.10.17 19:59:17 LOG3[1096:1192]: SSL_accept: Peer suddenly disconnected
    2008.10.17 19:59:17 LOG5[1096:1192]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
    2008.10.17 20:00:56 LOG5[1096:1172]: pop3s accepted connection from 127.0.0.1:1859
    2008.10.17 20:01:51 LOG3[1096:1172]: SSL_accept: Peer suddenly disconnected
    2008.10.17 20:01:51 LOG5[1096:1172]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
    2008.10.17 20:07:10 LOG5[1096:1152]: pop3s accepted connection from 127.0.0.1:1877
    2008.10.17 20:08:13 LOG3[1096:1152]: SSL_accept: Peer suddenly disconnected
    2008.10.17 20:08:13 LOG5[1096:1152]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket

    Any advice would be greatly appreciated. Thanks
    Nancy

  11. ____________________________
    Here’s my stunnel.conf file
    ————————————–
    Note: SMTP is not working, POP is good
    ————————————–

    ; Some options used here may not be adequate for your particular configuration

    ; Certificate/key is needed in server mode and optional in client mode

    ; The default certificate is provided only for testing and should not

    ; be used in a production environment

    cert = stunnel.pem

    ;key = stunnel.pem

    ; Some performance tunings

    socket = l:TCP_NODELAY=1

    socket = r:TCP_NODELAY=1

    ; Workaround for Eudora bug

    ;options = DONT_INSERT_EMPTY_FRAGMENTS

    ; Authentication stuff

    ;verify = 2

    ; Don’t forget to c_rehash CApath

    ;CApath = certs

    ; It’s often easier to use CAfile

    ;CAfile = certs.pem

    ; Don’t forget to c_rehash CRLpath
    ;CRLpath = crls
    ; Alternatively you can use CRLfile
    ;CRLfile = crls.pem
    ; Some debugging stuff useful for troubleshooting
    ;debug = 7
    ;output = stunnel.log
    ; Use it for client mode

    client = yes

    ; Service-level configuration

    [pop3s]
    accept = 995
    connect = pop.att.yahoo.com:995

    [imaps]
    accept = 993
    connect = 143

    [ssmtp]
    accept = 465
    connect = smtp.att.yahoo.com:465

    ;[https]
    ;accept = 443
    ;connect = 80
    ;TIMEOUTclose = 0
    ; vim:ft=dosini

  12. Just got off the phone with AT&T level two support and they said the issue has to be at the client side. And, that their mail servers are handled by Yahoo not AT&T, so they are unable to make any server setting changes.

    In looking at the logs sslv3 alert bad cert error and the stunnel users page yesterday, I’m wondering if creating a SSL cert locally for each client is required?
    Anyone, using GM and stunnel, ever change the config file to point to their own ssl certs/keys?

    Link to the stunnel users pg –
    http://stunnel.mirt.net/pipermail/stunnel-users/2004-December/000199.html

    Additionally, in the page (listed above) the user had his config file accept line set up as 127.0.0.1 versus having the port number instead. Has anyone set it up this way and have it work?

    [pops.xs4all.nl:995]
    accept = 127.0.0.1:5000
    connect = pops.xs4all.nl:995
    delay = yes

    [pop.gmail.com:995]
    accept = 127.0.0.1:5003
    connect = pop.gmail.com:995
    delay = yes

  13. I called them yesterday and AT&T level 1 tech support said their servers were fine. I’ll see if I can escalate it to level 2.
    Is there any more info you could give me on the error? What I mean is, the “sslv3 alert bad certificate” message in my stunnel logs are stating that there is an issue with AT&T’s certificate or something wrong with stunnel?

  14. here’s my log file…
    2008.09.21 18:06:30 LOG5[1628:1208]: stunnel 4.26 on x86-pc-mingw32-gnu with OpenSSL 0.9.8i 15 Sep 2008
    2008.09.21 18:06:30 LOG5[1628:1208]: Threading:WIN32 SSL:ENGINE Sockets:SELECT,IPv4
    2008.09.21 18:06:30 LOG5[1628:1188]: No limit detected for the number of clients
    2008.09.21 18:22:43 LOG5[1628:1588]: ssmtp accepted connection from 127.0.0.1:1237
    2008.09.21 18:22:43 LOG5[1628:1588]: ssmtp connected remote server from 192.168.2.200:1238
    2008.09.21 18:22:43 LOG3[1628:1588]: SSL_connect: 14094412: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate
    2008.09.21 18:22:43 LOG5[1628:1588]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket

  15. I just recently (5 weeks ago) started using stunnel with GoldMine v6 and 2 days ago my users started getting the error “The socket was disconnected unexpectedly” when they tried to send e-mails (SMTP). We use AT&T’s SMTP servers. Here’s a copy of the stunnel.conf file…
    client = yes

    ; Service-level configuration

    [pop3s]
    accept = 995
    connect = pop.att.yahoo.com:995

    [imaps]
    accept = 993
    connect = 143

    [ssmtp]
    accept = 465
    connect = smtp.att.yahoo.com:465

    I’ve read the great solutions about and implemented a few, but I’m still receiving the error.
    Any help would be appreciated.

  16. Doug,
    Happily, I can now read my Gmail in Goldmine 6.7 after setting up Stunnel according to your directions.

    However, it only imported Sep 2007 then stopped. I fixed this by setting GMAIL pop to be from now on instead of all.

    Why do you think this is? Is there a quantity limitation in Gmail? I have downloaded several hundred emails into goldmine from regular pop accounts so … not sure …

    Thank you,

    Jmm

  17. That sounds great doug, but do you know how to run two different email through stunnell off the same goldmine?

  18. Sure I do remote sessions all the time. It’s basically what I do for a living. ๐Ÿ™‚

    I’ll respond back to you via direct e-mail and we can schedule a time.

  19. Doug I am trying to set up my two different work emails on a server to work for 4 different stations and all of your tips aren’t working I am getting a message that reads, system error:10061 cant connet to internet or pop3 settings any ideas? do you do indivudual sessions

  20. sure, my AVG scans my mail without any special configuration.. I turned off the free advertisement bit they like to add to the bottom of e-mail bodies, however.

  21. I think you are also an AVG Antivirus user. Have you configured AVG to scan your gmail e-mails as they are coming into GM? I can’t seem to get the AVG settings correct.

  22. I have followed all of the instructions from above and I still receive the following error messsage:

    goldmine cannot connect to your mail server please verify your internet connection and POP3 settings.

    socket returned error: connection refused
    System error 10061

    I have a folder c:/stunnel
    contains stunnel installer, stunnel.conf, libeay32.dll and libssl32.dll

    I changed my settings in gmail and my goldmine 6.0 set up is as follows:

    both smtp and pop3 servers are 127.0.0.1
    the pop3 server port is 9995
    the smtp server port is 465

    ther server requires authentication box is checked

    the “login/plain” box is checked

    I don’t know why it isn’t working! Any help you can offer would be greatly appreciated. I’m not very tech savvy but have followed the instructions… thank you sir.

  23. Your e-mail provider is likely limiting you. I am not sure whether the limitation is based on which e-mail account you’re sending from or whether it’s your IP address or… ? You’d have to discuss it with tech support from the ISP in question, in all likelihood.

  24. i have been using goldmine for about three months and could only get it to work with your help, but unfortunatley i can only send 500 email per day. so if i understand goldmine correctly each user can have their own email therefor i should be able send more emails by using different users, right? if so then i would have to set up each of the accounts like i did the first account. well i have tried to set up one other account and when i send an email it gives me an error message that says “a protocol ERROR has occured in logging in or retreiving messages:535 5.7.1 credentioals rejected 3sm5478213hsw.12” what does this mean?

  25. GoldMine doesn’t support IMAP, unfortunately, so you’ll need to use regular pop3 to retrieve your e-mail. Is there any particular reason you want IMAP?

    Regardless, keep an eye out for GoldMine 7.5 in January for exciting new developments regarding e-mail protocols!

  26. Thanks you very much for the guide to using stunnel. Worked fine for me. Can I now modify GM so it will retrieve email from imap.googe.com. Their setup instructions are below. Thanks so much

    Configuring other mail clients
    You can use the following information to configure IMAP with many mail clients. If you encounter difficulties, we suggest contacting your mail client’s customer support department for further instructions — we’re unable to provide assistance with configuring mail clients not listed here.

    Incoming Mail (IMAP) Server – requires SSL: imap.gmail.com
    Use SSL: Yes
    Port: 993
    Outgoing Mail (SMTP) Server – requires TLS: smtp.gmail.com (use authentication)
    Use Authentication: Yes
    Use STARTTLS: Yes (some clients call this SSL)
    Port: 465 or 587
    Account Name: your Gmail username (including @gmail.com)
    Email Address: your full Gmail email address (username@gmail.com)
    Password: your Gmail password

    Please note that if your client does not support SMTP authentication, you won’t be able to send mail through your client using your Gmail address.

  27. The number of asterisks displayed by GoldMine does not coincide with the number of characters in the password — this is a security measure.

    Are you sure you have the correct username and password?

  28. Thanks Doug, I understand that Goldmine is not changing the actual password however for some reason when we enter our 6 digit password in Goldmine settings (the same one we use for Gmail) by the time we’ve okayed or applyed out, we go back in and there is 15 asterixs instead of 6. I just don’t understand where the 15 are coming from and it seems like that’s why I get the message “username or password not accepted.” Sorry if this isn’t clear.

  29. Hi Doug, Thanks for all the useful tips above. We’ve followed everything step by step but we’re having an interesting problem. Running Goldmine 5.7 trying to drop Gmail in (using Google Apps – would that make any difference) and each time we try to download email get error message saying “username and password not accepted.” When we go back into settings it’s as though Goldmine has changed the password because it’s now a 15 letter password instead of our 6 letter one! The 15 letter password is the same from internet tab through to accounts and advanced tab. Any ideas?
    Dave

  30. sounds like maybe a firewall issue (software or hardware firewall) or possibly an issue with the e-mail boxes in question (did the pop3 setting get turned off in the gmail options area?)

    Other than these thoughts, I’m not sure how much troubleshooting is practical in the comments of this article.. You might want to start a thread on the forum for better visibility! http://www.contactreview.net

  31. Well, my problem is rather odd. We have a ten-user license of Goldmine, and several computers which all connect to the server to use it. Two of the computers cannot access e-mail using Goldmine. Actually, it’s worse than that. One of these two computers worked perfectly until today, and then it suddenly stopped working, giving an error message 2570.
    The other one works occasionally (maybe once or twice a week). It gives an error 10061. The settings in Goldmine work on any other computers, except for this computer. It first connects to a program called K9, and then to Stunnel (or not, on the second computer, as it isn’t really connecting to a secure connection). Everything appears to be the same as on other computers, except that it isn’t working.
    Better yet, it sends mail no problem, from both computers I think.

Leave a Reply