Re: "no shared cypher", no matter what I try

2018-12-11 Thread Marco Fioretti
The problem is solved, thanks to Aki. I was missing the "include" directive in dovecot.conf, because it was not needed in the dovecot version I was using previously. Now I have a related question, and... another problem :-) The question: what is a safer/more sensible value for ssl_cipher_list

Re: "no shared cypher", no matter what I try

2018-12-11 Thread Benny Pedersen via dovecot
Marco Fioretti skrev den 2018-12-11 11:12: maybe I misunderstood you, but both adding an "ssl = yes" line to this section of dovecot.conf, and commenting out the whole "four lines starting at "inet_listener imaps" do not have any effect : you should not edit dovecot.conf :/ edit config files

Re: "no shared cypher", no matter what I try

2018-12-11 Thread Aki Tuomi
Ah, the actual problem appears to be that you are not including the conf.d directory at all in your config, so you are ending up with no certificate at all. This is handled better in 2.3.x. Aki On 11.12.2018 12.01, Aki Tuomi wrote: > Hi! > > You have misconfigured service imap-login, remove the

Re: "no shared cypher", no matter what I try

2018-12-11 Thread Marco Fioretti
Hello Aki, maybe I misunderstood you, but both adding an "ssl = yes" line to this section of dovecot.conf, and commenting out the whole "four lines starting at "inet_listener imaps" do not have any effect : service imap-login { inet_listener imap { port = 0 } inet_listener imaps {

Re: "no shared cypher", no matter what I try

2018-12-11 Thread Aki Tuomi
Hi! You have misconfigured service imap-login, remove the 993 listener config (it's there by default) or add ssl = yes to it. Aki On 11.12.2018 11.58, Marco Fioretti wrote: > hello, and some update > short version: the error is still there, but I have some more data to > share, thanks in

Re: "no shared cypher", no matter what I try

2018-12-11 Thread Marco Fioretti
hello, and some update short version: the error is still there, but I have some more data to share, thanks in advance for further advice first, I am using Mutt 1.10.1 (2018-07-13) as mail client, so it is not an obsolete version. second... at the moment I can send email through postfix on the

Re: "no shared cypher", no matter what I try

2018-12-08 Thread Greg Wildman
On Sat, 2018-12-08 at 11:03 +0100, Marco Fioretti wrote: > Greetings, > I have had to reinstall my email server on another Linux (centos 7.6) > VPS, with a newer version of dovecot, other software and a brand new > letsencrypt certificate just for email withpostfix and dovecot (that > certificate

Re: "no shared cypher", no matter what I try

2018-12-08 Thread Doug Hardie
Have you tried connecting with openssl c_client, with a cypher list of all? My suspicion is that one of the pair of programs is only using old, weak cyphers [due to age and the other only strong ones. David

Re: "no shared cypher", no matter what I try

2018-12-08 Thread Doug Hardie
I ran into that error message with a different application and it turned out that the server certificate was expired. -- Doug > On 8 December 2018, at 12:22, David Gardner wrote: > > Have you tried connecting with openssl c_client, with a cypher list of all? > > My suspicion is that one of

Re: "no shared cypher", no matter what I try

2018-12-08 Thread David Gardner
Have you tried connecting with openssl c_client, with a cypher list of all? My suspicion is that one of the pair of programs is only using old, weak cyphers [due to age and the other only strong ones. David

Re: "no shared cypher", no matter what I try

2018-12-08 Thread Benny Pedersen via dovecot
Marco Fioretti skrev den 2018-12-08 11:03: I have had to reinstall my email server on another Linux (centos 7.6) reinstalls often helps make the same problems with precompiled distros :=) is openssl installed or what ssl api is in use ? did you create a bug report to centos mantainers ?

Re: "no shared cypher", no matter what I try

2018-12-08 Thread Aki Tuomi
> On 08 December 2018 at 12:03 Marco Fioretti wrote: > > > Greetings, > I have had to reinstall my email server on another Linux (centos 7.6) > VPS, with a newer version of dovecot, other software and a brand new > letsencrypt certificate just for email withpostfix and dovecot (that >