I can confirm this on two separate cyrus installations - 2.3.7 and 2.3.12. I'm pretty sure both servers does NOT request any client certificate. One more thing - looks like this happens only when you have at least one client cert installed. I'll try to gather more debug info and will report back tomorrow. Regards, Stoyan On Wednesday 05 November 2008 17:58:51 Frank Richter wrote: > Hi, > I've a cyrus-imapd 2.3.12 installation with these options in imapd.conf > > tls_cert_file: /etc/exim/etc/server.crt > tls_key_file: /etc/exim/etc/server.key > tls_ca_file: /etc/pki/tls/certs/ca-chain.crt > tls_require_cert: 0 > > SSL and STARTTLS are working fine. > > I've imported a personal S/MIME certificate to thunderbird. When > connecting to the IMAP server (using STARTTLS), thunderbird asks me to > select a client cert, showing (translated from German): > This website (!) requires a certificate for identification ... > Chose a certificate ... > > The server doesn't and shouldn't accept client certificates. > So who is wrong? My configuration, thunderbird ... > > I hope somebody will enlighten me ... > > Thanks, > Frank ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
