On 16. 9. 2010 23:48, Timo Sirainen wrote:
On 16.9.2010, at 22.20, Ing. Daniel Rozsnyó wrote:
Sep 16 23:12:30 [dovecot] imap-login: Disconnected (no auth attempts):
rip=192.168.77.202, lip=192.168.77.201, mpid=0, TLS handshaking: SSL_accept()
failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad
certificate: SSL alert number 42
My guess: The upgrade changed/broke Dovecot's SSL certificates. doveconf -n
output would have been useful.
The first line is temporal, for accessing emails on :143 (its over VPN
so still secure).
~ $ dovecot -n
# 2.0.2: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.35-gentoo-r6 i686 Gentoo Base System release 2.0.1
disable_plaintext_auth = no
listen = *
mail_location = maildir:~/.maildir
passdb {
args = *
driver = pam
}
protocols = imap
ssl_cert = </etc/ssl/dovecot/server.pem
ssl_key = </etc/ssl/dovecot/server.key
userdb {
driver = passwd
}
verbose_ssl = yes
The files which are referred in SSL are:
-r-------- 1 root root 887 Nov 11 2009 server.key
-r-------- 1 root root 1930 Nov 11 2009 server.pem
The KEY contains an rsa private key and PEM is a private key +
certificate (no DH). These are the files which were used before and they
have worked.
Trying to change their owner/group to dovecot:dovecot does not help,
same error occurs. Renaming them or broking the filenames in
ssl_cert/key results in different error:
doveconf: Fatal: Error in configuration file
/etc/dovecot/conf.d/10-ssl.conf line 13: ssl_cert: Can't open file
/etc/ssl/dovecot/server.pem: No such file or directory
Thats all. Other ideas? Regenerate the SSL key/certificate? Try other
client?
Daniel
