Disable client authentication with certificates

2013-12-03 Thread Stefan Gofferje
Hi, I have a Cyrus IMAP and Postfix running. Some time ago, I configured them for TLS and recently, I started to use also Thunderbird on those and Thunderbird is asking me on startup which certificate to use for identification for IMAP. Is there a way to tell Cyrus to *not* request the client

Re: Disable client authentication with certificates

2013-12-03 Thread Dan White
On 12/03/13 14:29 +0200, Stefan Gofferje wrote: Hi, I have a Cyrus IMAP and Postfix running. Some time ago, I configured them for TLS and recently, I started to use also Thunderbird on those and Thunderbird is asking me on startup which certificate to use for identification for IMAP. Is there a

Re: Disable client authentication with certificates

2013-12-03 Thread Stefan Gofferje
On 12/03/2013 04:39 PM, Dan White wrote: What log entries do you see during TLS authentication? Dec 3 19:13:10 home imap[17224]: SSL_accept() succeeded - done Dec 3 19:13:10 home imap[17224]: starttls: TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits new) no authentication Dec 3

Re: Disable client authentication with certificates

2013-12-03 Thread Dan White
On 12/03/13 19:52 +0200, Stefan Gofferje wrote: On 12/03/2013 04:39 PM, Dan White wrote: What log entries do you see during TLS authentication? Dec 3 19:13:10 home imap[17224]: SSL_accept() succeeded - done Dec 3 19:13:10 home imap[17224]: starttls: TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA

Re: Disable client authentication with certificates

2013-12-03 Thread Stefan Gofferje
On 12/03/2013 08:01 PM, Dan White wrote: On 12/03/2013 04:39 PM, Dan White wrote: This looks successful, from the server's viewpoint. Yesyes, when I click cancel when Thunderbird asks which certificate to use, everything goes fine. However, if I *do* tell Thunderbird to use a certificate, the