Oh, my. That was intended for Nathan only. (Thanks, Evolution!) I don't mind Mike's silliness. It encourages me to post questions about e.g. why Google Play Store will not update while OpenVPN is up... were I actually to take the time to put together all the ancillary documentation, like my network topology.... oy.
I wonder where THIS email will go. Maybe we can talk about Stross's Vile Offspring and how to avoid being left behind. Maybe I need to assume corporeality and hit the stammtisch... mumble. On Thu, 2018-04-12 at 11:27 -0700, Matt Birkholz wrote: > Hi Nathan, > > Did you get any help with this, or figure it out yourself by now? > > I have been doing similar things on a CoxBusiness static IP for years, > so maybe I can help. (Also Mike's latest silliness makes me wish for > more erudite discussions on PLUG. Smart questions going unanswered > only makes it worse? :-) > > I included a couple quick "reactions" to your email (below) but maybe > this is moot now, a week on. > > -Matt > > On Thu, 2018-04-05 at 20:29 -0700, Nathan O'Brennan wrote: > > Hey all, > > > > I use Let's Encrypt on my web server, and I use the same certificate for > > my postfix and dovecot services. Today I realized that my phone has not > > alerted me to new messages. I logged into my webmail via Firefix (I > > don't usually log into webmail until my phone says I have mail) and sure > > enough, I had quite a bit of mail, so I opened my BlueMail app and it > > will not connect because my certificate cannot be verified. > > > > Firefox works fine on webmail. > > Chrome works fine on webmail. > > Postfix, Apache, and Dovecot all operate correctly without warnings. > > > > Bluemail, Thunderbird, and Kmail all fail to connect because the > > certificate cannot be verified. > > You did not attach the intermediate certificates? > > > I had to accept the certificate to use it on my phone. Has Let's Encrypt > > changed something? Or what? I don't get any errors on my server, dovecot > > reports a username of <> during the initial handshake, which I think is > > normal, then reports an error only when my phone attempts to connect > > which looks like: > > > > > > Apr 05 20:26:23 codezilla.xyz dovecot[1699]: imap-login: Disconnected > > (no auth attempts in 3 secs): user=<>, rip=70.xxx.aaa.162, > > lip=138.197.192.135, TLS handshaking: SSL_accept() failed: > > error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate > > unknown: SSL alert number 46, session=<xsrZniVpOQBGsb2i> > > > > Best I can tell this is a failure on my server's attempt to verify my > > phone's certificate? > > Your phone has an IMAP client certificate? I missed that part. > > The error message actually looks like mine when certificates do not > validate and clients do not attempt to log in. > > > Any help would be appreciated. > > --------------------------------------------------- > > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > > To subscribe, unsubscribe, or to change your mail settings: > > http://lists.phxlinux.org/mailman/listinfo/plug-discuss > > --------------------------------------------------- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss --------------------------------------------------- PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
