Jorey Bump wrote, at 03/19/2008 06:41 PM:
> tls_ca_file: /etc/ssl/certs/local-ca-bundle.crt
This seems to be the cause of the problem. If I remove this setting,
everything works as expected. Note that this didn't interfere on 2.3.7.
The entry in imapd.conf(5) isn't very illuminating:
tls_ca_file: <none>
File containing one or more Certificate Authority (CA)
certificates.
Is this used for verifying client certificates? If so, why wouldn't it
be possible to have it defined and still accept other means of
authentication? What's changed about this parameter since 2.3.7?
Fortunately, I don't appear to need it, and can no longer remember why I
defined it in the first place (unless it's needed for chained
certificates or local CAs, which I once used on the 2.3.7 production
machine, but switched to a single root certificate).
----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
