Package: icedove Version: 38.7.0-1~deb8u1 Severity: normal Tags: upstream Dear Maintainer,
I'm running icedove for years as MUA via IMAP for my Cyrus2 mail server. Access has been encrypted using TLS on port 143 for many years. Recently, it suddenly ceased working. In the relevant time frame I updated icedove and had to renew the server certificate. I can contact the mail server using openssl s_client. And of course by falling back to plain text access. Wireshark shows that an apparently normal STARTTLS sequence is answered by icedove with "Bad Certificate", immediately. However, from UI perspective icedove seems to hang infinitely. There is no message about problems with certificates shown to the user. This at least should be considered a bug. Beyond that I cannot find any actual problems with the certificates in the chain. I am able to import both, server and CA, into icedoves certificate store. Inspecting the details of the server certificate correctly lists the CA certificate in the tree view. But still connection fails the same way. I'd expect icedove to complain about the certificates also when importing them into the store, if there is actually an issue with them. Some more information can be found at http://serverfault.com/questions/766389/thunderbird-starttls-fails-connecting-to-cyrus-imap-2-2-13 The example log using NSPR_LOG_MODULES=all:5 published there neither revealed anything useful. Kind regards, - lars. -- System Information: Debian Release: 8.3 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages icedove depends on: ii debianutils 4.4+b1 ii fontconfig 2.11.0-6.3 ii libasound2 1.0.28-1 ii libatk1.0-0 2.14.0-1 ii libc6 2.19-18+deb8u3 ii libcairo2 1.14.0-2.1 ii libdbus-1-3 1.8.20-0+deb8u1 ii libdbus-glib-1-2 0.102-1 ii libevent-2.0-5 2.0.21-stable-2 ii libffi6 3.1-2+b2 ii libfontconfig1 2.11.0-6.3 ii libfreetype6 2.5.2-3+deb8u1 ii libgcc1 1:4.9.2-10 ii libgdk-pixbuf2.0-0 2.31.1-2+deb8u4 ii libglib2.0-0 2.42.1-1 ii libgtk2.0-0 2.24.25-3 ii libhunspell-1.3-0 1.3.3-3 ii libpango-1.0-0 1.36.8-3 ii libpangocairo-1.0-0 1.36.8-3 ii libpangoft2-1.0-0 1.36.8-3 ii libpixman-1-0 0.32.6-3 ii libsqlite3-0 3.8.7.1-1+deb8u1 ii libstartup-notification0 0.12-4 ii libstdc++6 4.9.2-10 ii libx11-6 2:1.6.2-3 ii libxcomposite1 1:0.4.4-1 ii libxdamage1 1:1.1.4-2+b1 ii libxext6 2:1.3.3-1 ii libxfixes3 1:5.0.1-2+b2 ii libxrender1 1:0.9.8-1+b1 ii libxt6 1:1.1.4-1+b1 ii psmisc 22.21-2 ii zlib1g 1:1.2.8.dfsg-2+b1 Versions of packages icedove recommends: ii iceowl-extension 38.7.0-1~deb8u1 ii myspell-de-at [myspell-dictionary] 20131206-5 ii myspell-de-ch [myspell-dictionary] 20131206-5 ii myspell-de-de [myspell-dictionary] 20131206-5 ii myspell-en-us [myspell-dictionary] 1:3.3.0-4 Versions of packages icedove suggests: ii fonts-lyx 2.1.2-2 ii libgssapi-krb5-2 1.12.1+dfsg-19+deb8u2 -- no debconf information
