How did you do this? Did you change IMAPSSLPORT in imap4r1.c from 993
to 994 (the most straightforward way)? Or did you use some other
means? If so, what?
We didn't change IMAPSSLPORT. We're running Solaris 10 and controlling
this through inetd:
[EMAIL PROTECTED]> svcs -a | grep imap
online Feb_27 svc:/network/imaps/tcp:default
online Mar_14 svc:/network/imap/tcp:default
online Apr_17 svc:/network/imapstest/tcp:default
imapstest is version 2007a
To dismiss [1], do
telnet imapserversystem 994
You should be rewarded by dead silence after the connection is
established. If you see an IMAP greeting banner, then [1] is the problem.
We do, in fact, get dead silence.
To verify that [1] is not the problem, run openssl and do
s_client -connect imapserversystem:994
You should see a bunch of SSL diagnostic crud, and eventually an IMAP
greeting banner.
As you say, we get a bunch of SSL stuff, then only
* OK [CAPABILITY IMAP4REV1 LITERAL+ SASL-IR LOGIN-REFERRALS AUTH=PLAIN
AUTH=LOGIN] myserver.mathcs.emory.edu IMAP4rev1 2007a.403 at Tue, 29 Apr
2008 12:33:01 -0400 (EDT)
To test for [2], run a packet sniffer and try a connection. If both
sessions are quiet after connecting, that suggests [2], since a
plaintext IMAP client expects to be spoken to before it speaks, and in
SSL the client starts speaking first.
I think this describes what I'm seeing, but I'm going to run it by one
of my much more experienced colleagues to see if his interpretation is
the same.
Finally, turn on debugging telemetry in Mail.app. I don't know how to
do that, but I know that it can be done. See what the log there says.
If you see any IMAP protocol negotiations, either figure them out
yourself or pass it on to me and I'll tell you what it was doing.
I'm still trying to turn on any useful debugging in Mail.app.
Simon indicated in another response that there may be a problem if we
use a self-signed certificate. We may have a self-signed certificate in
our chain, but we definitely have an externally-signed certificate as well.
I'm going to see if I can find an appropriate Mac users group and ask if
anyone there is running imapd 2007a against Mail.app 2.1.3 on OS X 10.4.
Ken Keating
_______________________________________________
Imap-uw mailing list
[email protected]
https://mailman1.u.washington.edu/mailman/listinfo/imap-uw
