Re: Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Nic Bernstein
On 05/17/2017 10:54 AM, Patrick Goetz wrote: Follow up question: The package maintainer for the Arch cyrus-imapd package has fallen behind and my users need to be able to access their mail, so as a temporary work around I'm just going to build/compile cyrus 3.0.1 from source. I asked about

Re: Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Patrick Goetz
Follow up question: The package maintainer for the Arch cyrus-imapd package has fallen behind and my users need to be able to access their mail, so as a temporary work around I'm just going to build/compile cyrus 3.0.1 from source. I asked about some of this before, but will my 2.5.10 config

Re: Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Patrick Goetz
Thanks everyone; this is as I expected. On 05/17/2017 10:04 AM, Jason Englander wrote: On Wed, 17 May 2017, Patrick Goetz wrote: I had to update my mail server for unrelated reasons, after which I couldn't get cyrus-master to start. It turned out to be related to ctl_cyrusdb not running beca

Re: Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Patrick Boutilier
On 05/17/2017 12:04 PM, Jason Englander wrote: On Wed, 17 May 2017, Patrick Goetz wrote: I had to update my mail server for unrelated reasons, after which I couldn't get cyrus-master to start. It turned out to be related to ctl_cyrusdb not running because the program was compiled against lib

Re: Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Jason Englander
On Wed, 17 May 2017, Patrick Goetz wrote: before I start googling, can someone tell me how to disable SSLv3 in imapd.conf? Possibly not relevant because of the other post, but the answer is: man imapd.conf -> tls_ciphers Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: ht

Re: Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Patrick Boutilier
On 05/17/2017 11:40 AM, Patrick Goetz wrote: So, running openssl s_client -connect mail.myserver.org:143 -starttls imap Same error with -tls1_2 ? openssl s_client -connect mail.myserver.org:143 -tls1_2 -starttls imap it appears that it's still trying to use SSLv3 and the newest versio

Re: Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Jason Englander
On Wed, 17 May 2017, Patrick Goetz wrote: I had to update my mail server for unrelated reasons, after which I couldn't get cyrus-master to start. It turned out to be related to ctl_cyrusdb not running because the program was compiled against libssl.so.1.0 while this library had been upgraded

Re: Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Patrick Goetz
Hi - No, the private key and certificate should match; I'm using the same key/cert pair for webmail, and that one works fine. I'm still thinking cyrus 2.5.10 isn't compatible with the newest version of openssl. Here is the "enumerate ciphers" nmap output for the mail, and webmail servers, r

Re: Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Wolfgang Breyha
Patrick Goetz wrote on 17/05/17 16:40: > SSL alert number 40 This error has nothing to do with SSLv3 or protocol version at all. Maybe your private key and certificate do not match on server side. Greetings, Wolfgang -- Wolfgang Breyha | http://www.blafasel.at/ Vienna University Computer Center

Re: Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Patrick Goetz
So, running openssl s_client -connect mail.myserver.org:143 -starttls imap it appears that it's still trying to use SSLv3 and the newest version of openssl won't allow this? === [pgoetz@frog ~]$ openssl s_client -connect mail.myserver.org:143 -starttls imap

Problems with cyrus 2.5.10 after system update

2017-05-17 Thread Patrick Goetz
I had to update my mail server for unrelated reasons, after which I couldn't get cyrus-master to start. It turned out to be related to ctl_cyrusdb not running because the program was compiled against libssl.so.1.0 while this library had been upgraded to libssl.so.1.1 So, I recompiled cyrus (