Greetings,
In doing some debugging of authentication issues, I'm wondering if these
SSL warnings are anything to be investigating?
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x10,
ret=1: before/accept initialization [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: before/accept initialization [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2002,
ret=-1: SSLv2/v3 read client hello A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 read client hello A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 write server hello A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 write certificate A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 write key exchange A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 write server done A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 flush data [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2002,
ret=-1: SSLv3 read client certificate A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2002,
ret=-1: SSLv3 read client certificate A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 read client key exchange A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 read finished A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 write change cipher spec A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 write finished A [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2001,
ret=1: SSLv3 flush data [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x20,
ret=1: SSL negotiation finished successfully [192.168.70.101]
Jul 24 11:23:16 triata dovecot: imap-login: Warning: SSL: where=0x2002,
ret=1: SSL negotiation finished successfully [192.168.70.101]
[root@triata ~]# doveconf -n
# 2.0.14: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.18-194.32.1.el5xen x86_64 CentOS release 5.5 (Final) ext3
auth_debug = yes
auth_debug_passwords = yes
auth_mechanisms = plain login
auth_verbose = yes
auth_verbose_passwords = plain
mail_debug = yes
mail_home = /vmail/%d/%n/home
mail_location = maildir:/vmail/%d/%n
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope
encoded-character vacation subaddress comparator-i;ascii-numeric
relational regex imap4flags copy include variables body enotify
environment mailbox date
namespace {
inbox = yes
location =
prefix =
separator = /
type = private
}
passdb {
args = /etc/dovecot/dovecot-mysql.conf
driver = sql
}
plugin {
mail_log_fields = uid box msgid size from
sieve = /vmail/%d/%n/sievescript
}
protocols = imap pop3 lmtp sieve sieve
service auth {
unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
}
unix_listener auth-master {
group = vmail
mode = 0660
user = vmail
}
unix_listener auth-userdb {
mode = 0660
user = vmail
}
user = root
}
service imap-login {
process_min_avail = 3
service_count = 0
vsz_limit = 0
}
service managesieve-login {
inet_listener sieve {
port = 4190
}
process_min_avail = 0
service_count = 1
vsz_limit = 64 M
}
ssl_cert = </etc/pki/dovecot/certs/smtpd.pem
ssl_key = </etc/pki/dovecot/private/smtpd.pem
userdb {
args = /etc/dovecot/dovecot-mysql.conf
driver = sql
}
verbose_ssl = yes
protocol lda {
hostname = triata.globalchangemultimedia.net
mail_plugin_dir = /usr/lib64/dovecot/
mail_plugins = sieve
postmaster_address = postmas...@globalchangemultimedia.net
}
protocol imap {
imap_idle_notify_interval = 24 mins
mail_max_userip_connections = 20
}
protocol sieve {
mail_max_userip_connections = 10
managesieve_implementation_string = Dovecot Pigeonhole
managesieve_logout_format = bytes=%i/%o
managesieve_max_line_length = 65536
}
--
Asai
