I hate to keep bothing you, but I'm still having problems with getting my connection through.
When attempting to connect from a machine on my local network (192.168.0.5) I am getting messages such as this: @4000000042ae743b3a487e7c 21573 0 [EMAIL PROTECTED]:] error initializing Binc IMAP: SSL negotiation failed: Internal SSL error: e rror:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate By following the instructions at http://lifewithbincimap.org/index.php/Main/DoItYourselfCertificateAuthority, I created these files (edited): *** bincimap.pem -----BEGIN RSA PRIVATE KEY----- blablabla -----END RSA PRIVATE KEY----- Certificate: Data: Version: 3 (0x2) Serial Number: 0 (0x0) Signature Algorithm: md5WithRSAEncryption Issuer: C=xx, ST=asdf, L=asdf, O=My co., CN=rokko/[EMAIL PROTECTED] Validity Not Before: Jun 14 04:34:38 2005 GMT Not After : Jun 14 04:34:38 2006 GMT Subject: C=xx, ST=asdf, L=asdf, O=My co., CN=rokko/[EMAIL PROTECTED] Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (1024 bit) Modulus (1024 bit): bla bla bla Exponent: 123456 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE Netscape Comment: OpenSSL Generated Certificate X509v3 Subject Key Identifier: 89:86:1D:9A:BF:B6:DD:27:36:9E:12:B7:4C:41:E1:D5:9B:6E:7D:6F X509v3 Authority Key Identifier: DirName:/C=xx/ST=asdf/L=asdf/O=My co./CN=rokko/[EMAIL PROTECTED] serial:00 Signature Algorithm: md5WithRSAEncryption bla bla bla -----BEGIN CERTIFICATE----- bal bla bla -----END CERTIFICATE----- *** diy_ca.pem -----BEGIN CERTIFICATE----- more bla bla bla -----END CERTIFICATE----- My bincimap.conf file looks like this: Authentication { allow plain auth in non ssl = "no", auth penalty = 4, disable starttls = "no" } Security { jail path = "/var/qmail/supervise/bincimap", jail user = "nobody", jail group = "nobody" } Log { type = "multilog", environment ip variable = "TCPREMOTEIP" } Mailbox { depot = "IMAPdir", type = "Maildir", path = "Maildir", auto create inbox = "yes", auto subscribe mailboxes = "INBOX", umask = "077" } Session { idle timeout = 1860, auth timeout = 60, transfer timeout = 1200, transfer buffer size = 1024 } SSL { pem file = "/var/qmail/control/bincimap.pem", ca file = "/var/qmail/control/diy_ca.pem", cipher list = "!ADH:RC4+RSA:HIGH:MEDIUM:LOW:EXP:+SSLv2:+EXP", verify peer = "no" } Any ideas? By the way, the above was an attempted connection with a Thunderbird client. I tried with an Outlook client, but nothing even showed up with the logs... Thanks again so much for all your help!! Dave
