Re: TLS: unable to get certificate ...

2008-04-14 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wesley Craig wrote: | On 13 Apr 2008, at 17:19, Goetz Babin-Ebell wrote: |> Cyrus barfing on no CA data set with no client authentication is a bug. | | Hard not to agree. :) Submit a patch, please. OK, I've opened a ticked and submitted the patch: h

Re: TLS: unable to get certificate ...

2008-04-13 Thread Wesley Craig
On 13 Apr 2008, at 17:19, Goetz Babin-Ebell wrote: > Cyrus barfing on no CA data set with no client authentication is a > bug. Hard not to agree. :) Submit a patch, please. :wes Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archive

Re: TLS: unable to get certificate ...

2008-04-13 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wesley Craig schrieb: | From the article: |> I’ve *finally* discovered why my IMAP server no longer likes my |> self-signed certificates. The certificates are just fine. Cyrus is |> just fine. It’s OpenSSL that’s the problem - Bug 1513 to be exact. |

Re: TLS: unable to get certificate ...

2008-04-12 Thread Wesley Craig
From the article: > I’ve *finally* discovered why my IMAP server no longer likes my > self-signed certificates. The certificates are just fine. Cyrus is > just fine. It’s OpenSSL that’s the problem - Bug 1513 to be exact. > Cyrus calls SSL_CTX_use_certificate_chain_file() to read in the >

Re: TLS: unable to get certificate ...

2008-04-12 Thread Wesley Craig
What's the ticket number/URL? :wes On 12 Apr 2008, at 09:11, Goetz Babin-Ebell wrote: > Looking in the last source I have here (2.3.8), I'm definitively not > happy about the code that generates that message: > * If you don't do SSL client authentication, this message > ~ is only confusing noise

Re: TLS: unable to get certificate ...

2008-04-12 Thread brian
Goetz Babin-Ebell wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > brian schrieb: > | Goetz Babin-Ebell wrote: > |> brian schrieb: > |> | brian wrote: > > |> |> I'm trying (and failing) to set up TLS and hope someone might be > able to > |> |> shed some light on my problem. Authentica

Re: TLS: unable to get certificate ...

2008-04-12 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 brian schrieb: | Goetz Babin-Ebell wrote: |> brian schrieb: |> | brian wrote: |> |> I'm trying (and failing) to set up TLS and hope someone might be able to |> |> shed some light on my problem. Authentication failed so I checked |> |> maillog and foun

Re: TLS: unable to get certificate ...

2008-04-11 Thread brian
Goetz Babin-Ebell wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > brian schrieb: > | brian wrote: > |> cyrus-imapd-2.3.9-7.fc7 > |> openssl-0.9.8b-15.fc7 > |> > |> I'm trying (and failing) to set up TLS and hope someone might be able to > |> shed some light on my problem. Authenticati

Re: TLS: unable to get certificate ...

2008-04-11 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 brian schrieb: | brian wrote: |> cyrus-imapd-2.3.9-7.fc7 |> openssl-0.9.8b-15.fc7 |> |> I'm trying (and failing) to set up TLS and hope someone might be able to |> shed some light on my problem. Authentication failed so I checked |> maillog and found:

Re: TLS: unable to get certificate ...

2008-04-11 Thread Andrew Morgan
On Fri, 11 Apr 2008, brian wrote: > brian wrote: >> brian wrote: >>> cyrus-imapd-2.3.9-7.fc7 >>> openssl-0.9.8b-15.fc7 >>> >>> I'm trying (and failing) to set up TLS and hope someone might be able to >>> shed some light on my problem. Authentication failed so I checked >>> maillog and found: >>> >

Re: TLS: unable to get certificate ...

2008-04-11 Thread brian
brian wrote: > brian wrote: >> cyrus-imapd-2.3.9-7.fc7 >> openssl-0.9.8b-15.fc7 >> >> I'm trying (and failing) to set up TLS and hope someone might be able to >> shed some light on my problem. Authentication failed so I checked >> maillog and found: >> >> imap[30288]: TLS server engine: cannot lo

Re: TLS: unable to get certificate ...

2008-04-11 Thread brian
brian wrote: > cyrus-imapd-2.3.9-7.fc7 > openssl-0.9.8b-15.fc7 > > I'm trying (and failing) to set up TLS and hope someone might be able to > shed some light on my problem. Authentication failed so I checked > maillog and found: > > imap[30288]: TLS server engine: cannot load CA data > imap[302