On 05/17/2017 11:40 AM, Patrick Goetz wrote:
So, running
openssl s_client -connect mail.myserver.org:143 -starttls imap
Same error with -tls1_2 ?
openssl s_client -connect mail.myserver.org:143 -tls1_2 -starttls imap
it appears that it's still trying to use SSLv3 and the newest version of
openssl won't allow this?
===================================
[pgoetz@frog ~]$ openssl s_client -connect mail.myserver.org:143
-starttls imap
CONNECTED(00000003)
140245839085440:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert
handshake failure:ssl/record/rec_layer_s3.c:1385:SSL alert number 40
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 726 bytes and written 202 bytes
Verification: OK
===================================
before I start googling, can someone tell me how to disable SSLv3 in
imapd.conf?
On 05/17/2017 08:53 AM, Patrick Goetz wrote:
I had to update my mail server for unrelated reasons, after which I
couldn't get cyrus-master to start. It turned out to be related to
ctl_cyrusdb not running because the program was compiled against
libssl.so.1.0 while this library had been upgraded to libssl.so.1.1
So, I recompiled cyrus (I'm running Arch linux and am using the
cyrus-imapd AUR package) but now it doesn't seem to be able to use SSL
at all. When I start my MUA I get a message
"The IMAP server ... does not support the selected authentication
method: which is STARTTLS over port 143.
Any ideas on what I can do short of downgrading libssl.so to
libssl.so.1.0?
----
Cyrus Home Page:
http://secure-web.cisco.com/14J2MQPcWP1V1X8PI7D2pUqnGEr83roQya4gSH694w_JGDrGdpxHbSGLYx2PnLX7w187T5IaGviognr46OHjOG5F3-d_jhv8cpuxwj7z4pjDLeqGTRyK_CudP3ZiE1suhA-NBZD0wBVvCzte5M1PRziU_2qtB_fLcoTufxwcX6HEUPuIHwCv0OK3mH6S9POAy65hrJwzNzDXth7sSGzPEpUNAu6j5uDEZ3IIAu7wamKWZO9ju6JYqHp1I8N1-DN88eozxuwOztR_QM8_6zIGTWnPY1qbRHulv8Qv-EEmsJApUgp6siVoBpukK-54k7T9o/http%3A%2F%2Fwww.cyrusimap.org%2F
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
begin:vcard
fn:Patrick Boutilier
n:Boutilier;Patrick
org:;Nova Scotia Department of Education
adr:;;2021 Brunswick Street;Halifax;NS;B3K 2Y5;Canada
email;internet:boutilpj@xxxxxxxxxxx
title:WAN Communications Specialist
tel;work:902-424-6800
tel;fax:902-424-0874
version:2.1
end:vcard
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
