I'm attempting to deploy cyrus-imapd on a Red Hat 7.2 machine (single
Athlon XP, 512MB RAM, RAID-1 IDE disks).  I have use cyrus-imapd
before, but not the SSL (pop3s/imaps) implementation.

I'm finding that if I install from the RPMs by Ramiro Morales
(cyrus-imapd-2.0.16-5rm from
http://rmorales.modwest.com/rpms/cyrus-imapd/ ) and recompile them
from the SRPM, things work fine, EXCEPT that connections to the pop3s
and imaps ports connect and then do nothing.  Connecting to these
ports using the command

  openssl s_client -connect localhost:995 -status -debug

generates:

  CONNECTED(00000003)
  SSL_connect:before/connect initialization
  write to 0814D810 [0814D858] (124 bytes => 124 (0x7C))
  0000 - 80 7a 01 03 01 00 51 00-00 00 20 00 00 16 00 00   .z....Q... .....
  0010 - 13 00 00 0a 07 00 c0 00-00 66 00 00 05 00 00 04   .........f......
  0020 - 03 00 80 01 00 80 08 00-80 00 00 65 00 00 64 00   ...........e..d.
  0030 - 00 63 00 00 62 00 00 61-00 00 60 00 00 15 00 00   .c..b..a..`.....
  0040 - 12 00 00 09 06 00 40 00-00 14 00 00 11 00 00 08   ......@.........
  0050 - 00 00 06 00 00 03 04 00-80 02 00 80 2d 6d 29 83   ............-m).
  0060 - 21 b1 e7 f5 19 ee fa 6c-cb 93 d8 e5 23 95 0f 10   !......l....#...
  0070 - 5a 67 a5 e5 b0 a7 3e d3-25 0b 5b eb               Zg....>.%.[.
  SSL_connect:SSLv2/v3 write client hello A

and then sits there.  The TCP connection stays open, but no data is
received across it from the server.  The SSL tunnel is never
initialized.

Connections to the non-SSL pop3 and imap ports work fine.  Using the
cyrus-imapd-2.0.16-4 RPMs from

I note that the difference in the way the servers are called
(specified in /etc/cyrus.conf) is the -s option.  Running them by hand
generates the probably highly relevant error message:

  06:59:47 jonathan@test:~$ /usr/cyrus/bin/imapd -s
  /usr/cyrus/bin/imapd: invalid option -- s

Playing a little with gdb suggests that getopt is being called with an
options string of "C:", though in imap/imapd.c the code seems to read:

  while ((opt = getopt(argc, argv, "C:sp:")) != EOF) {

What further tests or changes to my configuration should I make I make
in order to get pop3 and imap over SSL working for this platform?  I'd
prefer not to update to Cyrus 2.1.x just yet, because of the SASLv2
requirement.

I suspect I may have just missed something obvious...?

Thanks in advance!

Jonathan
--
Jonathan Marsden <[EMAIL PROTECTED]>

Reply via email to