Re: TLS/SSL not working with some clients

[Mark Edwards]

I'm also having a different client problem with a different server. I have imapd compiled with SSL and plaintext on my OSX Server 10.1.4 box, and Mail.app and Outlook Express are connecting fine (SSL on 993).

However, when I try to use Mozilla Mail to connect using SSL on 993, I get this error in /var/log/maillog:

Feb 16 21:43:43 dina imapd[27468]: Unable to accept SSL connection, host=lilbuddy.antsclimbtree.com [216.27.183.129]
Feb 16 21:43:43 dina imapd[27468]: SSL error status: error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac


This is very odd, since I have nearly the identical setup on my FreeBSD 4.7 box, and Mozilla Mail connects just fine. I think it is something with OpenSSL, because exim also reports this error when Mozilla Mail tries to connect using STARTTLS on port 25.

Again, I've seen people reporting this problem, but no solution. Any ideas?

Thanks!

--
Mark Edwards
Engineer
Mr. Toad's
San Francisco, CA