On 05/17/2017 11:40 AM, Patrick Goetz wrote:
So, runningopenssl s_client -connect mail.myserver.org:143 -starttls imap
Same error with -tls1_2 ? openssl s_client -connect mail.myserver.org:143 -tls1_2 -starttls imap
it appears that it's still trying to use SSLv3 and the newest version of openssl won't allow this?===================================[pgoetz@frog ~]$ openssl s_client -connect mail.myserver.org:143 -starttls imapCONNECTED(00000003)140245839085440:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:ssl/record/rec_layer_s3.c:1385:SSL alert number 40--- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 726 bytes and written 202 bytes Verification: OK ===================================before I start googling, can someone tell me how to disable SSLv3 in imapd.conf?On 05/17/2017 08:53 AM, Patrick Goetz wrote:I had to update my mail server for unrelated reasons, after which I couldn't get cyrus-master to start. It turned out to be related to ctl_cyrusdb not running because the program was compiled against libssl.so.1.0 while this library had been upgraded to libssl.so.1.1So, I recompiled cyrus (I'm running Arch linux and am using the cyrus-imapd AUR package) but now it doesn't seem to be able to use SSL at all. When I start my MUA I get a message"The IMAP server ... does not support the selected authentication method: which is STARTTLS over port 143.Any ideas on what I can do short of downgrading libssl.so to libssl.so.1.0?----Cyrus Home Page: http://secure-web.cisco.com/14J2MQPcWP1V1X8PI7D2pUqnGEr83roQya4gSH694w_JGDrGdpxHbSGLYx2PnLX7w187T5IaGviognr46OHjOG5F3-d_jhv8cpuxwj7z4pjDLeqGTRyK_CudP3ZiE1suhA-NBZD0wBVvCzte5M1PRziU_2qtB_fLcoTufxwcX6HEUPuIHwCv0OK3mH6S9POAy65hrJwzNzDXth7sSGzPEpUNAu6j5uDEZ3IIAu7wamKWZO9ju6JYqHp1I8N1-DN88eozxuwOztR_QM8_6zIGTWnPY1qbRHulv8Qv-EEmsJApUgp6siVoBpukK-54k7T9o/http%3A%2F%2Fwww.cyrusimap.org%2FList Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
<<attachment: boutilpj.vcf>>
---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
