Re: Problems with cyrus 2.5.10 after system update

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



So, running

 openssl s_client -connect mail.myserver.org:143 -starttls imap

it appears that it's still trying to use SSLv3 and the newest version of openssl won't allow this?

===================================
[pgoetz@frog ~]$ openssl s_client -connect mail.myserver.org:143 -starttls imap
CONNECTED(00000003)
140245839085440:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:ssl/record/rec_layer_s3.c:1385:SSL alert number 40
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 726 bytes and written 202 bytes
Verification: OK
===================================

before I start googling, can someone tell me how to disable SSLv3 in imapd.conf?

On 05/17/2017 08:53 AM, Patrick Goetz wrote:
I had to update my mail server for unrelated reasons, after which I couldn't get cyrus-master to start. It turned out to be related to ctl_cyrusdb not running because the program was compiled against libssl.so.1.0 while this library had been upgraded to libssl.so.1.1

So, I recompiled cyrus (I'm running Arch linux and am using the cyrus-imapd AUR package) but now it doesn't seem to be able to use SSL at all. When I start my MUA I get a message

"The IMAP server ... does not support the selected authentication method: which is STARTTLS over port 143.

Any ideas on what I can do short of downgrading libssl.so to libssl.so.1.0?

----
Cyrus Home Page: http://secure-web.cisco.com/14J2MQPcWP1V1X8PI7D2pUqnGEr83roQya4gSH694w_JGDrGdpxHbSGLYx2PnLX7w187T5IaGviognr46OHjOG5F3-d_jhv8cpuxwj7z4pjDLeqGTRyK_CudP3ZiE1suhA-NBZD0wBVvCzte5M1PRziU_2qtB_fLcoTufxwcX6HEUPuIHwCv0OK3mH6S9POAy65hrJwzNzDXth7sSGzPEpUNAu6j5uDEZ3IIAu7wamKWZO9ju6JYqHp1I8N1-DN88eozxuwOztR_QM8_6zIGTWnPY1qbRHulv8Qv-EEmsJApUgp6siVoBpukK-54k7T9o/http%3A%2F%2Fwww.cyrusimap.org%2F
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus



[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux