I think you need to use either TLS or SSL but not both at the same time.

If you listen on the regular imap port, then clients will connect and issue a START_TLS command and the session will be encrypted.

When you connect to imaps the session is already encrypted with SSL, so  trying to start TLS doesn't get you anything.

To stop unsecured logins on the imap port you also want to set

allowplaintext: no


-Patrick
On Sep 30, 2005, at 9:30 AM, Ivan R. Sy Jr. wrote:

Sep 30 20:40:04 mail imaps[41090]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication



----
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Reply via email to