severity #502109 normal
tags #502109 + moreinfo
thanks
Joris Mocka wrote:
> Package: imapproxy
> Version: 1.2.6-4
> Severity: important
>
> After running "apt-get install imapproxy" the following error occurs:
>
> Setting up imapproxy (1.2.6-4) ...
> Starting IMAP proxy: invoke-rc.d: initscript imapproxy, action "start" failed.
> dpkg: error processing imapproxy (--configure):
> subprocess post-installation script returned error exit status 1
> Errors were encountered while processing:
> imapproxy
> E: Sub-process /usr/bin/dpkg returned an error code (1)
>
Logical result of the error logged below:
> In the log, a CA is missing:
> Oct 13 18:15:55 server in.imapproxyd[30472]: main(): Enabling STARTTLS.
> Oct 13 18:15:55 server in.imapproxyd[30472]: Initialising 39 pthread_mutexes
> Oct 13 18:15:55 server imapd[30474]: Logout user=??? host=localhost
> [127.0.0.1]
>
[ this message looks a bit odd... imapproxy does establish a
connection, but it does not actually log in at this time]
> Oct 13 18:15:55 server in.imapproxyd[30472]: main(): Failed to load CA data.
>
[ broken certificate chain ??? -- it shouldn't happen with self-signed
certs, but ... ]
> Exiting.
>
> But in the config TLS is set to no force:
> force_tls no
>
This switch does not have the effect you seem to think: Setting it to
"yes" forces using TLS, but it does not prevent imapproxy from trying to
secure the connection if at all possible when disabled.
> I run uw-imap only on localhost for a webmail interface.
>
Not that it is really intrinsic to your problem, but why do you
advertise TLS over localhost? That is quite redundant.
Of the many installations I know of, essentially all connect to either
courier or dovecot, over standard IMAP (port 143). Most of them connect
to localhost, too -- those which don't are only reachable within a
secured LAN.
Is there any particular reason for you to use UW-IMAP instead of other
implementation? (just curious)
> Any help would be kind.
>
Sure. If it really is a bug, let's stomp on it :-)
J.L.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
