I tried to send this earlier, but sourceforge's servers rejected it
because of broken TLS.  If you're receiving this, all is well.

-----

I upgraded something on my CentOS 5.2 box the other day, and courier
started rejecting all SSL connections, with messages like:

mail imapd-ssl: couriertls: accept: error:1408A0C1:SSL
    routines:SSL3_GET_CLIENT_HELLO:no shared cipher

or:

mail imapd-ssl: couriertls: connect: error:1408F10B:SSL
    routines:SSL3_GET_RECORD:wrong version number

When this first happened, I compiled and upgraded to the latest versions
of courier and courier-authlib (since I've been several versions
behind), but the errors were still present.

I'm also occasionally getting this error from authlib when I log in
without TLS/SSL:

authdaemond: Deprecated pam_stack module called from service "imap"

I got around the authlib issue by adding myself to my userdb (most of my
users are in userdb, but there are a few accounts like my personal one
which I just use via system auth).

I downgraded again (both courier and the nss/gnutls libs) and things
seemingly worked for a few hours, but then the errors started appearing
again with no changes on my end.

Does anyone have any idea what might be causing this?  And even more
importantly, a way to fix it?

-----

And answering my own question, it appears that the courier spec file for
building RPMs directly from the tarballs defaults to using openssl if
openssl-devel is installed.  Once I removed openssl-devel, it reverted
to gnutls, and things seem to be good now.

I'd still like to find a fix for the PAM issue, but at least I can
get/send email again.

-Chris

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to