-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 hi, SSL certs & TLS usage are fine/good on my system with other mail apps, but, so far, w/ cyrus-latest, no luck. after a successful server build/install/launch, an (simple?) attempt to check TLS function w/: % imtest -v \ -t "/var/CERTS/mail.testdomain.com.CYRUSkey.rsa.pem" \ -p imap \ -m digest-md5 \ -a testuser.admin@xxxxxxxxxxxxxxxxxxx \ -u testuser.admin@xxxxxxxxxxxxxxxxxxx \ -r mail.testdomain.com \ mail.testdomain.com reports/fails @; S: * OK [CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID STARTTLS LOGINDISABLED] mail.testdomain.com Cyrus IMAP4 v2.3.7 server ready C: C01 CAPABILITY S: * CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID STARTTLS LOGINDISABLED ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT SORT=MODSEQ THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE CATENATE CONDSTORE IDLE LISTEXT LIST-SUBSCRIBED URLAUTH S: C01 OK Completed C: S01 STARTTLS S: S01 OK Begin TLS negotiation now starting TLS engine unable to get certificate from '/var/CERTS/mail.testdomain.com.CYRUSkey.rsa.pem' TLS engine: cannot load cert/key data Start TLS engine failed Asking for capabilities again since they might have changed C: C01 CAPABILITY S: S01 NO Starttls negotiation failed S: * BAD Invalid tag every check i've been able to muster on the cert itself is 'ok' ... either i'm doing something wrong in/with cyrus (possible/likely ...), or there's a problem. can *someone* please lend a hand? thanks, richard - -- /"\ \ / ASCII Ribbon Campaign X against HTML email, vCards / \ & micro$oft attachments [GPG] OpenMacNews at gmail dot com fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iEYEAREDAAYFAkTZ9xUACgkQlffdvTZxCMaCoACbBKEXuYfcjh9Z/PhwPnnCqXtK kAIAoLOqCUJUVXuth6vgMYiX2oDLzUQ9 =0wxO -----END PGP SIGNATURE----- ---- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
