On 27 Jan 2002, Gordon Messmer wrote:

> On Sun, 2002-01-27 at 08:09, Bryan Ross wrote:
> > 
> > I've got courier-mta up and running with virtual domains, and everything
> > works lovely.. apart from secure connections. Eg, I can pop3 in, but as
> > soon as I ask Outlook or a similar client to connect using SSL, it
> > fails, and in /var/log/maillog, I get;
> > 
> > pop3d-ssl: starttls: accept: error:140760FC:SSL 
>routines:SSL23_GET_CLIENT_HELLO:unknown protocol
> 
> This is frequently a problem when your client doesn't accept the
> server's cert.  Make sure that your CN matches the hostname that clients
> use to connect to the server.
> 
> You can make sure that SSL is working properly, and verify the details
> of your cert using openssl like this:
> 
> openssl s_client -connect host:995
> 
> openssl will print out the details of the certificate and connect you to
> the POP3 server.  Just type "QUIT".  :)
> 

I changed the information in /etc/courier/imapd.cnf and pop3d.cnf to
reflect my system, then used mkimapdcert and mkpop3dcert to make new
certificates.

When I do 'openssl s_client -connect myhostname:995', I get:

CONNECTED(00000003)
write:errno=104

Any ideas? I did a quick search through google, and on the courier
documentation, but didn't come up with anything apart from the mkpop3dcert
man page- which although helpful, doesn't really give any insight as to
the 'larger picture'.

I know SSL connections are pretty much a topic in themselves. Is there
anywhere I can go read up on them? I've installed a certificate for an
apache webserver, but that was a relatively simple affair.

Bryan.

+-----                      -++-                      -----+
| Bryan Ross                           <[EMAIL PROTECTED]> |
+----------------------------------------------------------+
|  Follow your dream! Unless it's the one where you're at  |
|  work in your underwear during a fire drill.             |
+----------------------------------------------------------+
|                            http://www.return0.net/bryan/ |
+-----                      -++-                      -----+


_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to