Sorry for the late reply (and top post), but it also could be that you need to fine tune the SSL context. You can do so by specifying $imap_stream_options in config/config_local.php. The documentation for this setting can be found in the example config_local for 1.5.2 here: http://sourceforge.net/p/squirrelmail/code/HEAD/tree/trunk/squirrelmail/config/config_local.example.php The setting should do the same thing in 1.4.23. Also note there is a setting there for the SMTP side as well. On 2/25/15, David Highley <dhighley@xxxxxxxxxxxxxxxxxxxxxxx> wrote: > "=?utf-8?B?IlTDs3RoIEF0dGlsYSI=?= wrote:" >> >> The error message speaks for itself. Check dovecot's ssl configuration >> settings. Especially ssl_cipher_list in conf.d/10-ssl.conf > > The file has no list defined, just these comments. > # SSL ciphers to use > # #ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL > > Looks like SSLv2 is disabled. What does squirrelmail need? > >> http://wiki2.dovecot.org/SSL/DovecotConfiguration >> -- >> dr Tóth Attila, Radiológus, 06-20-825-8057 >> Attila Toth MD, Radiologist, +36-20-825-8057 >> >> 2015.Február 24.(K) 05:59 idÅ‘pontban David Highley ezt Ãrta: >> > "David Highley wrote:" >> >> >> >> "Paul Lesniewski wrote:" >> >> > >> >> > On Sunday, February 22, 2015, David Highley < >> >> > dhighley@xxxxxxxxxxxxxxxxxxxxxxx> wrote: >> >> > >> >> > > Description of the setup; remote access for email via web server >> >> with >> >> > > squirrelmail and dovecot. Configured to use imap port 993 and smtp >> >> tls. >> >> > > Email resides on another internal email server. This has been >> >> working >> >> > > for many years and was working on fedora 20. After new install of >> >> web >> >> > > server to fedora 21 and an update to the email server to fedora 21 >> >> the >> >> > > roaming email access has been broken; Error connecting to IMAP >> >> server: >> >> > > tls://mail. 0 : >> >> > >> >> > >> >> > It appears to be trying to connect to a hostname without the rest of >> >> your >> >> > domain. This corresponds to your IMAP server address of just 'mail' >> >> >> >> That was a mistake, but should have worked anyway with the host alias >> >> in >> >> the host file. >> >> >> >> We installed thunderbird to help with testing and have made some >> >> progress. We are able to use 993 imap access for reading email and >> >> modified the web server so it can send email after we found that the >> >> email server rejects any type of relaying. Bit confused as to how this >> >> appeared to work in the past. >> >> >> >> So we changed the config_local.php file not to use imap_tls or >> >> smtp_tls >> >> and now we see a very long conncecting followed by the error message: >> >> ERROR: Connection dropped by IMAP server. >> >> >> >> We have checked the journalctl logs on both hosts and neither log >> >> anything. We do see the web ssl access and request. >> > >> > We are still learning how to find information with journalctl. We see >> > the error below and have tried several different things that seemed to >> > fix this issue for others but so far we are not able to make this work. >> > >> > The error: >> > dovecot[1857]: imap-login: Disconnected (no auth attempts in 60 secs): >> > user=<>, rip=10.2.2.3, lip=10.2.2.7, TLS handshaking: SSL_accept() >> > failed: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown >> > protocol, session=<yhak9c0PTwAKAgID> >> > >> > Since we are using 993 with thunderbird which also uses dovecot why >> > would it not work for squirrelmail? >> > >> >> >> >> > >> >> > >> >> > >> >> > -- >> >> > Paul Lesniewski >> >> > SquirrelMail Team >> >> > Please support Open Source Software by donating to SquirrelMail! >> >> > http://squirrelmail.org/donate_paul_lesniewski.php >> >> > ------------------------------------------------------------------------------ >> >> > Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server >> >> > from Actuate! Instantly Supercharge Your Business Reports and >> >> Dashboards >> >> > with Interactivity, Sharing, Native Excel Exports, App Integration & >> >> more >> >> > Get technology previously reserved for billion-dollar corporations, >> >> FREE >> >> > http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk >> >> > ----- >> >> > squirrelmail-users mailing list >> >> > Posting guidelines: http://squirrelmail.org/postingguidelines >> >> > List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx >> >> > List archives: http://news.gmane.org/gmane.mail.squirrelmail.user >> >> > List info (subscribe/unsubscribe/change options): >> >> https://lists.sourceforge.net/lists/listinfo/squirrelmail-users >> >> > >> >> >> >> >> >> >> >> ------------------------------------------------------------------------------ >> >> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server >> >> from Actuate! Instantly Supercharge Your Business Reports and >> >> Dashboards >> >> with Interactivity, Sharing, Native Excel Exports, App Integration & >> >> more >> >> Get technology previously reserved for billion-dollar corporations, >> >> FREE >> >> http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk >> >> ----- >> >> squirrelmail-users mailing list >> >> Posting guidelines: http://squirrelmail.org/postingguidelines >> >> List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx >> >> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user >> >> List info (subscribe/unsubscribe/change options): >> >> https://lists.sourceforge.net/lists/listinfo/squirrelmail-users >> >> >> > >> > ------------------------------------------------------------------------------ >> > Dive into the World of Parallel Programming The Go Parallel Website, >> > sponsored >> > by Intel and developed in partnership with Slashdot Media, is your hub >> > for >> > all >> > things parallel software development, from weekly thought leadership >> > blogs >> > to >> > news, videos, case studies, tutorials and more. Take a look and join >> > the >> > conversation now. http://goparallel.sourceforge.net/ >> > ----- >> > squirrelmail-users mailing list >> > Posting guidelines: http://squirrelmail.org/postingguidelines >> > List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx >> > List archives: http://news.gmane.org/gmane.mail.squirrelmail.user >> > List info (subscribe/unsubscribe/change options): >> > https://lists.sourceforge.net/lists/listinfo/squirrelmail-users >> > >> >> >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming The Go Parallel Website, >> sponsored >> by Intel and developed in partnership with Slashdot Media, is your hub for >> all >> things parallel software development, from weekly thought leadership blogs >> to >> news, videos, case studies, tutorials and more. Take a look and join the >> conversation now. http://goparallel.sourceforge.net/ >> ----- >> squirrelmail-users mailing list >> Posting guidelines: http://squirrelmail.org/postingguidelines >> List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx >> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user >> List info (subscribe/unsubscribe/change options): >> https://lists.sourceforge.net/lists/listinfo/squirrelmail-users >> > > -- Paul Lesniewski SquirrelMail Team Please support Open Source Software by donating to SquirrelMail! http://squirrelmail.org/donate_paul_lesniewski.php ------------------------------------------------------------------------------ ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
