Re: Expire (manually) TLS sessions?

[Sebastian Hagedorn <Hagedorn@xxxxxxxxxxxx>]

--On 16. Januar 2009 09:43:02 -0500 Jeff Blaine <jblaine@xxxxxxxxxxxx> 
wrote:

> A new cert did not solve the problem:
>
> Jan 16 09:41:30 imapsrv imap[12264]: [ID 921384 local6.debug] accepted
> connection
> Jan 16 09:41:30 imapsrv imap[12264]: [ID 192010 local6.debug] wrong
> version number in SSL_accept() -> fail

But it results in a different error message.

> Jan 16 09:41:30 imapsrv imap[12264]: [ID 239158 local6.notice] STARTTLS
> negotiation failed: bva-172.our.com

That reminds me of something. Try removing this line from your config:

tls_ca_file:    /var/imap/ca.crt

Also, try using different clients. IIRC, there is an issue specifically 
with Thunderbird and that setting. I don't remember the details, but you 
should be able to find them in the archives.
--
    .:.Sebastian Hagedorn - RZKR-R1 (Gebäude 52), Zimmer 18.:.
Zentrum für angewandte Informatik - Universitätsweiter Service RRZK
.:.Universität zu Köln / Cologne University - ✆ +49-221-478-5587.:.
                  .:.:.:.Skype: shagedorn.:.:.:.

Attachment: pgpSVyad4qfvd.pgp
Description: PGP signature

----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html