Re: [Dovecot] Help!

2012-10-12 Thread Arne K. Haaje

Den 12.10.2012 19:09, skrev Justin Vore:

HELP!

I have installed sendmail, dovecot, and squirrel mail.  The squirrel
mail portion of it works just fine, but I would like to have Mozilla
Thunderbird as a client. Whenever I try and connect to the server it
says "Thunderbird failed to find the settings for your email account."
We do have an MX record in DNS pointing to our server. We are using
Ubuntu 12.0.4.1, and have Dovecot 2.2.6 sendmail version 8.14.4-2ubuntu2
We are doing this for a class project and it is due by Tuesday 10/16/2012..



This explains how to set up autoconfigure in TB. You need a DNS record 
and a little work on a webhost.


https://developer.mozilla.org/en-US/docs/Thunderbird/Autoconfiguration

Arne
--
Arne K. Haaje
http://www.drlinux.no/  ::: a...@drlinux.no
LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb


Re: [Dovecot] HA Mailbox Design

2012-08-10 Thread Arne K. Haaje
Torsdag 9. august 2012 20.47.50 skrev Stan Hoeppner:

[snip]

> To be quite frank, based upon the level of technical acumen you've
> demonstrated here, and the general financial position Greece finds
> itself in, and the fact you're a public institution, it seems you're a
> much better candidate for a Gmail hosted infrastructure than a VPS
> infrastructure with some manner of ad hoc software only HA measures
> bolted on, which is all you can do with VPS servers--you don't control
> the storage.

If they are a public institution, then they may be prohibited from hosting on 
Google, simply because possibly sensitive data would then be hosted in another 
country.

As for HA I agree with Stan in that it is both very expensive and difficult to 
do right, but I would also ask if do you *really* need it? 

Arne
-- 
Arne K. Haaje
http://www.drlinux.no/ 
Twitter: drlinuxno
LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb



Re: [Dovecot] Outlook 2010 very slow when using IMAP - are there any tweaks?

2012-07-03 Thread Arne K. Haaje

Den 03.07.2012 08:58, skrev Kaya Saman:

On Tue, Jul 3, 2012 at 7:46 AM, Timo Sirainen  wrote:

On 3.7.2012, at 9.38, Kaya Saman wrote:


So if I look at a different authentication mechanism say LDAP would it
improve performance?


I doubt authentication has anything to do with why Outlook downloads mails 
slowly.

But you could configure Outlook to use plaintext authentication instead of NTLM 
authentication to see if it makes a difference. No need to change anything on 
Dovecot side then.



I've just had a look and I don't think Outlook 2010 has that option ??



I belive there is a checkbox there called something like "Use secure 
authentication - PKA(?)". Uncheck it, and you should have plaintext.


Arne

--
Arne K. Haaje
http://www.drlinux.no/  ::: a...@drlinux.no
LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb




Re: [Dovecot] sieve with dovecot v1.x

2012-06-02 Thread Arne K. Haaje

Den 02.06.2012 15:50, skrev Andreas Meyer:
[snip]



what can I do now?



Regards,

Stephan.


   Andreas


You also need to tell roundcube which port to connect to managesieve with.

Depending on which plugin you use for roundcube, find it's config-file 
and loook for an option like this;


$rcmail_config['managesieve_port'] = 4190;

With such an old verion, it may be that your port is 2000.

Regards,

Arne

--
Arne K. Haaje - Dr Linux
http://www.drlinux.no/  ::: a...@drlinux.no
LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb


Re: [Dovecot] Mail migration troubles

2012-04-02 Thread Arne K. Haaje
Mandag 2. april 2012 11.19.47 skrev Spyros Tsiolis:

[snip]

> Is the above what I need if I migrate mailboxes FROM dovecot TO dovecot ?
> E.g. in my example, I only copy mailboxes from an old "u...@domaina.gr" to
> "u...@domainb.gr".
> 
> Is the above all I need ?

That worked for me when creating a backup copy of a mailbox, but with a 
different login.

I copied mailbox A to mailbox B, then created an entry in the auth table that 
pointed to mailbox B.

This was with maildir. I don't know if it works the same with all other types.

Regards,

Arne
-- 
Arne K. Haaje
http://www.drlinux.no/  
LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb




Re: [Dovecot] Temporary forbid some users login ?

2012-01-31 Thread Arne K. Haaje

Den 01. feb. 2012 06:55, skrev Frank Bonnet:

hello

is there a way to forbid SOME ( not all ) users's login with dovecot 2 ?
I need to move their IMAP folders to another place with more
disk space but I don't want to stop dovecot IMAP service for
the other users as the moving process will be a bit long ( 1 Tb to move )


thanks





This has been covered before, but if you are using SQL for auth-lookups 
then you can have something like this ins your query;


... AND active='y'

Arne

--
Arne K. Haaje - Dr Linux
http://www.drlinux.no/ ::: a...@drlinux.no
LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb



Re: [Dovecot] IMAP SPECIAL-USE extension

2011-12-07 Thread Arne K. Haaje
Tirsdag 6. desember 2011 14.58.04 skrev WJCarpenter:
> > On Fri, 2011-12-02 at 17:12 +0200, Timo Sirainen wrote:
> > 
> > I'm anyway now wondering what the defaults should be? Could someone
> > check what these defaults are for Outlook and any other clients you
> > 
> > have:
> >   * "Drafts" is used by all clients
> >   * "Trash" is used by all clients
> >   * "Junk" is used by all clients? Or is "Spam" used by some?
> >   * "Sent" is used by Thunderbird, Evolution
> >   * "Sent Messages" is used by Apple Mail
> 
> SquirrelMail (http://www.squirrelmail.org) and Hastymail2
> (http://www.hastymail.org) webmail clients let you customize
> draft/trash/sent, but the defaults for both are Drafts, Trash, and Sent.

Thunderbird also use a Templates folder.

Arne
-- 
Arne K. Haaje - Dr Linux
http://www.drlinux.no/  
LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb


Re: [Dovecot] Password query returned multiple matches

2011-09-01 Thread Arne K. Haaje
Wednesday 31. August 2011 11.44.03 skrev Simon Brereton :
> > -Original Message-
> > From: Timo Sirainen [mailto:t...@iki.fi]
> > 
> > On 31.8.2011, at 18.19, Simon Brereton wrote:
> > > Aug 30 22:41:45 mail dovecot: auth-worker(default):
> > sql(sbrere...@domain.co.uk,64.88.168.84): Password query returned
> > multiple matches
> > ..
> > 
> > > password_query = SELECT EmailAdd AS user, Password AS password,
> > 
> > concat('/var/spool/mail/virtual/',MailDirLoc) as userdb_home, 999 as
> > userdb_uid, 115 as userdb_gid FROM MailAccounts WHERE Username='%u'
> > AND active = '1';
> > 
> > > Since the EmailAdd is unique I don't see how it can return multiple
> > 
> > matches.
> > 
> > You're querying with Username, not with EmailAdd, and apparently
> > there are multiple rows where Username='sbrere...@domain.co.uk'.
> 
> Well, what do you know - there are two Usernames that at the same!  I have
> no idea how that happened.

You could change or add the index for Username column to UNIQUE. That will 
ensure it does not happen again :)

Arne

-- 
Arne K. Haaje - Dr Linux
http://www.drlinux.no/  ::: a...@drlinux.no
LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb


Re: [Dovecot] sieve logging

2011-04-20 Thread Arne K. Haaje

Den 20.04.2011 04:28, skrev Carsten Laun-De Lellis:

Hi all



I have installed dovecot 2.0.8 and sieve. Everything works fine, but I
wonder how can I log sieve actions?



Any help?


Hello,

This may not be exactly what you are looking, for but in my config I 
have these two lines;


 log_path = /var/log/dovecot-deliver.log
 info_log_path = /var/log/dovecot-deliver.log

It logs which folder the incoming message is delivered to, and this is 
ofc. set by the sieve rules.


deliver(a...@drlinux.no): 2010-04-27 09:22:30 Info: msgid=: saved 
mail to Lister.Dovecot


Regards,

Arne

--
Arne K. Haaje - Dr Linux
http://www.drlinux.no/




Re: [Dovecot] Initial Maildir directories

2011-01-24 Thread Arne K. Haaje
Mandag 24. januar 2011 15.08.38 skrev Mauricio Tavares :
>   Is there a way to specify additional directories to be created when a
> new user account is, well, created?

Yes,

You can use the Autocreate plugin for this.


From http://wiki2.dovecot.org/Plugins/Autocreate ;

protocol imap {
  mail_plugins = $mail_plugins autocreate
}
plugin {
  autocreate = Trash
  autocreate2 = Spam
  #autocreate3 = ..etc..
  autosubscribe = Trash
  autosubscribe2 = Spam
  #autosubscribe3 = ..etc..
}


Arne
-- 
Arne K. Haaje - Dr Linux
http://www.drlinux.no/  ::: a...@drlinux.no
LinkedIn: http://no.linkedin.com/pub/arne-haaje/27/189/bb


Re: [Dovecot] problem with folder creation

2010-10-28 Thread Arne K. Haaje
Torsdag 28. oktober 2010 01.58.31 skrev John Watson :
> I am running dovecot 1.2.12 on Free BSD 8.1. We also have postfix and a
> version of squirrelmail for the UI.  We are using MySql database to store
> the email account info. I wrote a script to insert about 100K users into
> mysql. Those accounts seem to work well and I'm able to see things like
> 'Drafts', 'Trash' and 'Sent'. Now I am working on code to create new
> accounts - one at a time. The accounts get created and I can send and
> receive email from them but when I go go Drafts, Sent or Trash I get an
> error that says:
> 
> ERROR: Could not complete request.
> Query: SELECT "INBOX.Drafts"
> Reason Given: Mailbox doesn't exist: INBOX.Drafts
> 
> When I go out and look at the mailbox folders for these users I only see
> "cur", "new", and "tmp" whereas on other accounts that work well I also
> see things like INBOX.Drafts etc. I have examined the sql that is
> inserting the accounts in bulk versus the one by one case and can not see
> any differences (other than a new mailbox name/password etc). Everything
> that I'm reading online indicates that Dovecot should just create these
> extra folders on the server and there is really nothing for either an
> admin or a user to do. Does anyone have any more information on this?
> 
>  Thanks in Advance
> John Watson

This may not be exactly what you are looking for, but the auto-create plugin 
can create the folders for you upon login first time to the account.

http://wiki1.dovecot.org/Plugins/Autocreate

plugin {
  autocreate = Trash
  autocreate2 = Junk
  autocreate3 = Sent
  autocreate4 = Drafts
  autosubscribe = Trash
  autosubscribe2 = Junk
  autosubscribe3 = Sent
  autosubscribe4 = Drafts
}

-- 

Arne K. Haaje   | www.drlinux.no
T: 69 51 15 52  | M: 92 88 44 66



Re: [Dovecot] How to pipe to external program

2010-08-26 Thread Arne K. Haaje

 Den 26.08.2010 21:27, skrev Egbert:

Hi,

Second try...
I have mailsystem with virtual users only (/home/vmail/domain/user). I 
need to integrate RT3.x (a ticketing system). I have installed the 
RT-client but I need to send the mail to an extrnal program. Rt wants 
me to insert:


|/usr/bin/rt-mailgate --queue bla --action bla --url http://bla.bal/
In /etc/postfix/aliases.

That does not work for me becase my local delivery agent is dovecot. 
The Sieve plugin seems not capable to forward to a external program.


What is the right way to achieve that mail to r...@mydomain is sent to 
the pipe?


TIA
Egbert Jan


Do it on the mailserver level, like in /etc/aliases

rt:/usr/bin/rt-mailgate --queue bla --action bla --url http://bla.bal/

Remeber to run "newaliases"

Dovecot (servring local mailboxes) should not have anythign to do with this

Regardsm

Arne

--
--------
Arne K. Haaje   | www.drlinux.no
T: 69 51 15 52  | M: 92 88 44 66




Re: [Dovecot] EVERYONE USING DOVECOT PLEASE SIGN: Thanks, Administrators of Dovecot!

2010-08-17 Thread Arne K. Haaje
 Tirsdag 17. august 2010 18.28.50 skrev Jerrale G :
> With the release of dovecot 2.0, the community of the Dovecot mailling
> list, and us at Shelton Computers, would sincerely like to thank the
> developers of Dovecot. For, if it were not for you, we would be stuck
> with Courier and would not have the impressive features of Sieve, as
> opposed to the unmanageable scripts, by end users, of maildrop.
> 
> *Our gratitude  goes to, but not limited to:*
> 
> *Timo Sirainen and Charles Marcus*
> 
> 
> *We apologize if we have missed anyone and ask that EVERYONE using
> dovecot would express their thanks and gratitude by signing this thread,
> to also include any people beyond the mentioned.*
> 
> Please, Mr. Sirainen, make a donation link as we have tried to find one
> on dovecot.org!

I much agree. Thanks guys for a wonderful software package. I'm actually 
basing a large part of my business on it :)

Regards,

Arne
-- 

Arne K. Haaje   | www.drlinux.no
T: 69 51 15 52  | M: 92 88 44 66



Re: [Dovecot] Temporary files

2010-07-14 Thread Arne K. Haaje

Den 14.07.2010 22:34, skrev Timo Sirainen:

In v1.0 .. v1.1 deliver was writing incoming>128k mail to /tmp file (to
avoid reading it all into memory). In v1.2 I moved it to user's home
directory. This slowed deliveries for NFS users. Also people with
filesystem quota had trouble since now user required twice as much
available quota to save a message. The FS quota problem was "solved" by
having quota-fs plugin change the default temp file path to /tmp.

So why was the move made in the first place? Because a) some people had
small (maybe ramfs) /tmp and Dovecot was eating it all up and b) to
avoid any potential security issues with storing per-user files to a
shared directory.

I'm now thinking about a new setting (mail_temp_dir?) for v2.0 where
these temp files would be stored (lda, lmtp, some others in future).
Maybe the b) problem isn't that huge, so maybe there doesn't need to be
a way to store them to user's home. So that leaves a) problem. Maybe the
setting could default to /var/tmp instead of /tmp? That probably has
more disk space available usually. (I hope /var/tmp is available
everywhere?)

Any thoughts?

   


I'd like to have /tmp as a default, but a variable to set it if the need 
is there. Much like default /tmp on MySQL works a long time, until you 
need to ALTER TABLE on that 30 GB table ;)


Arne



Re: [Dovecot] deliver and root user

2010-07-12 Thread Arne K. Haaje
 Mandag 12. juli 2010 20.56.52 skrev Bradlee Landis :
> On RHEL5, dovecot 1.0.7, I have set up sendmail to use `deliver` for
> my local mda. It keeps giving me this error for the root user though:
> 
> Jul 12 12:51:29 mail sendmail[4105]: o699225f001348:
> to=, ctladdr=
> (0/0), delay=3+08:49:26, xdelay=00:00:00, mailer=local, pri=7502879,
> dsn=4.0.0, stat=Deferred: local mailer (/usr/libexec/dovecot/deliver)
> exited with EX_TEMPFAIL
> 
> I've tried to `chmod +s /usr/libexec/dovecot/deliver`, which I read
> might fix some of those issues, but it didn't.
> 
> Anyways, here are the important changes I made in my config files for
> using `deliver`:
> 
> == sendmail.mc ==
> ...
> dnl ## Should I modify this??
> define(`PROCMAIL_MAILER_PATH', `/usr/bin/procmail')dnl
> ...
> dnl ## Should I have "localhost.localdomain" here? It currently is not.
> LOCAL_DOMAIN(`mydomain.com')
> ...
> FEATURE(`local_procmail',
> `/usr/libexec/dovecot/deliver',`/usr/libexec/dovecot/deliver -d $u')
> MODIFY_MAILER_FLAGS(`LOCAL', `-f')
> ...
> MAILER(smtp)
> MAILER(procmail)
> MAILER(local)
> == END ==
> 
> == dovecot.conf ==
> ...
> protocol lda {
>   postmaster_address = postmas...@mydomain.com
>   hostname = mydomain.com
> }
> == END ==
> 
> Any ideas, or do you need more information?

Hi,

Just a thought, but do you really want mail for root to be handled directly?

You can alias it in /etc/aliases or similar like this;

root: bradleelan...@gmail.com

Then run the command "newaliases" to update alias table. I've not used 
sendmail for years, but that's how I'd do it for postfix.

Regards,

Arne
-- 

Arne K. Haaje   | www.drlinux.no
T: 69 51 15 52  | M: 92 88 44 66



Re: [Dovecot] Migrating from CommunigatePro to Dovecot - anyone done this?

2010-06-16 Thread Arne K. Haaje
 Onsdag 16 juni 2010 15:49:09 skrev Gavin Lawrie :
> Apologies if this is in the archive - did look but couldn't find it.
> 
> Does anyone have any experience of migrating from CommunigatePro to
> Dovecot?
> 
> We currently run CGP 5.3.4, supporting a small system (20 or so users, one
> domain).  We've been using it for years, and have a mixed bag of MailDir
> and mbox folders accessed via IMAP clients.  Some users have large mail
> accounts (15GB total).  We're looking to move as CGP is evolving into a
> complex "Messaging Centre" application (PBX, SIP, Mail, Groupware, Portals
> etc.) which we don't need / use.
> 
> I had a look on the Dovecot Wiki and under migration are discussions about
> various other mail systems, but I don't know enough about these to tell if
> they would also apply to CGP.
> 
> Any thoughts / suggestions would be welcomed.
> 
> Thanks
> 

I used imapsync to for migrating from courier to dovecot. It basically logs in 
to old and new account as a client, then copies messages and flags.

Here is a guide;

http://www.howtoforge.com/how-to-migrate-mailboxes-between-imap-servers-with-
imapsync

Arne
-- 

Arne K. Haaje   | www.drlinux.no
T: 69 51 15 52  | M: 92 88 44 66



Re: [Dovecot] Dovecot 2.0beta4: Managesieve example config

2010-05-26 Thread Arne K. Haaje

Den 26.05.2010 21:53, skrev Pascal Volk:

On 05/26/2010 09:41 PM Arne K. Haaje wrote:
   

Er, maybe I'm shooting my foot here, but I think it should match. Unless we're
discussing different things port 2000 is listed for sieve in /etc/services

grep sieve /etc/services
cisco-sccp  2000/tcpsieve   # Cisco SCCP


Changing it would be (exaggeration!) like putting IMAP on port 1234
 

hm, u...@localhost dovecot-2.0 $ grep sieve /etc/services&&  ll !$
grep sieve /etc/services&&  ll /etc/services
sieve   4190/tcp# ManageSieve Protocol
-rw-r--r-- 1 root root 19226 Dec 12 00:26 /etc/services

And also IANA (http://www.iana.org/assignments/port-numbers) says:
sieve   4190/tcp   ManageSieve Protocol

   


I can only reply that Kmail sets 2000 as default port when setting 
"server supports sieve".


But this is an interesting update, it looks like ManageSieve has 
officially been moved to 4190 from 2000;

http://news.debian.net/2009/12/13/debian-is-moving-sieve-to-its-iana-allocated-port/

So old stuff out and new stuff in I guess ;)

Arne



Re: [Dovecot] Dovecot 2.0beta4: Managesieve example config

2010-05-26 Thread Arne K. Haaje
 Onsdag 26. mai 2010 17.20.29 skrev Timo Sirainen :
> On Wed, 2010-05-26 at 16:48 +0200, Stephan Bosch wrote:
> > > Code has managesieve, example config has sieve. I guess the code is
> > > wrong, since http://www.iana.org/assignments/port-numbers calls the
> > > 4190 port "sieve".
> > 
> > Hmm, didn't we decide to use "managesieve" everywhere as to avoid
> > confusion? I've renamed the service back and forth back then, remember?
> 
> Yes, I remember we did. :) But I'm not sure about the port specifically.
> Maybe the port names should match what's in /etc/services.. Or maybe it
> doesn't matter. I'm not sure.

Er, maybe I'm shooting my foot here, but I think it should match. Unless we're 
discussing different things port 2000 is listed for sieve in /etc/services

grep sieve /etc/services 
cisco-sccp  2000/tcpsieve   # Cisco SCCP


Changing it would be (exaggeration!) like putting IMAP on port 1234

Arne
-- 

Arne K. Haaje   | www.drlinux.no
T: 69 51 15 52  | M: 92 88 44 66



Re: [Dovecot] looking for feedbacks on courier to dovecot

2010-05-08 Thread Arne K. Haaje
 Fredag 7. mai 2010 16.41.25 skrev Mihamina Rakotomandimby :
> Manao ahoana, Hello, Bonjour,
> 
> We currently run courier POP .
> We would like to switch to Dovecot.
> 
> I encounter problems when migrating the UIDL because we have big
> Maildirs and POP re-downlading the data is not possible for most of the
> users.
> 
> I tried the http://www.dovecot.org/tools/courier-dovecot-migrate.pl
> script but I still have the re-downloading event.
> 
> What are your stories and advices about courier-to-dovecot move?
> 
> Misaotra, Thanks, Merci.

Hi,

When moving my users from courier to dovecot I used the imapsync tool, which I 
then made a script for.

Some info on imapsync http://freshmeat.net/projects/imapsync/

This worked great, and as it preserves flags users did not have to re-download 
mail. You might want to tune some of the parameters like wheter to subscribe 
to folders or not.

No, I only had maybe 100 accounts to move, so I don't know how well it stacks 
up with moving large amounts between servers.

Cheers,

Arne
-- 

Arne K. Haaje   | www.drlinux.no
T: 69 51 15 52  | M: 92 88 44 66



Re: [Dovecot] best choice of user database file to work with postfix

2010-04-22 Thread Arne K. Haaje

Phil Howard skrev:

On Thu, Apr 22, 2010 at 12:12 PM, Jerry  wrote:

  

On Thu, 22 Apr 2010 17:03:00 +0200
Rainer  articulated:



Well, it leaves out the *one tricky part* of using a flat file
database for virtual users with dovecot and postfix: there is no
common format that both understand directly.
  

I have not been following this thread as closely as I probably should
have; however, I was wondering what the OP's problem was with using
MySQL? It would greatly simplify the job of constructing and
maintaining databases. It is even possible to create tables that both
Postfix and Dovecot can use jointly if desired. I use MySQL for several
projects, and would never go back to using 'flat files" unless there
was no other way to achieve my goal.




The administration is going to be handed off to less technical people, and
my goal is to mimize the number of elements in this.  It's not about MySQL
itself ... it's about not running yet another server/daemon.

  

Have you looked into Postfix Admin? http://postfixadmin.sourceforge.net/

It might be a good solution for you. I'm using it for a a growing 
database of users and I'm very happy with it. The setup with postfix, 
dovecot and mysql was quite straight forward, and this interface 
requires no particular technical know-how.


Should be perfect if you can do the initial setup, then just give the 
admisn the password to this interface.


Arne



Re: [Dovecot] dovecot 1.2.11 + virtual plugin + deliver

2010-04-07 Thread Arne K. Haaje
 Tirsdag 06 april 2010 20:06:26 skrev Stef Simoens :
> Hello List and Timo,
> 
> I configured the virtual mailboxes which are really nice.
> 
> To create the virtual-folder, I made a postlogin-script as described in
> the wiki.
> 
> However, as my mail is delivered by dovecot's deliver ... I'm getting
> errors for people not yet logged in...
> 
> Namespace 'virtual.': virtual : Root mail directory doesn't exist:
> /var/vmail/domain.org/username/virtual
> 
> I tried removing the virtual-plugin from the protocol lda-section; and
> putting the namespace only in the protocol imap-section; but then the
> error becomes
> 
> Namespace 'virtual.': Unknown mail storage driver virtual
> 
> After an IMAP login (thanks to the postlogin-script) the virtual folder
> is created.
> However, I would prefer that mails to existing users and new users works
> even before they logged-in (and before the postlogin-script creates the
> virtual folder).
> 
> Any help?
> 
> Greetings,

I use Postfix admin ( http://sourceforge.net/projects/postfixadmin/ ) to create 
the mailboxes. Upon creation a welcome message is sent to the user, and 
delivering this creates the virtual mailbox.

Regards,

Arne

-- 

Arne K. Haaje   | www.drlinux.no
T: 69 51 15 52  | M: 92 88 44 66



Re: [Dovecot] using signed certificates for TLS/SSL

2010-02-18 Thread Arne K. Haaje
 Torsdag 18 februar 2010 14:47:03 skrev Leonardo Rodrigues :
>  Hi,
> 
>  I have, in one customer, a web server running on a Verisign-signed
> certificate SSL certificate. Everything works fine, IE and Firefox
> connects on https without asking anything, which usually happens on
> self-signed certificates. I'm trying to use that certificate on dovecot,
> but clients (Thunderbird basically) keeps saying the certificate is not
> valid.
> 
>  yes i'm using, when configuring Thunderbird, the same CN that was
> signed by Verisign for the web usage
> 
>  i've enabled verbose_ssl and got when thunderbird tries to connect:
> 
> Feb 18 12:32:02 correio dovecot: imap-login: Disconnected (no auth
> attempts): rip=201.86.xxx.xxx, lip=192.168.1.2, TLS handshaking:
> SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1
> alert unknown ca
> 
>  unknown CA ???
> 
>  is that Thunderbird that is not recognizing the Verisign-signed
> certificate ? Do i need to, somehow, install some Verisign CA
> certificate in dovecot.conf ?
> 
>  when using a self-signed certificate, i also get an SSL_accept
> failed, but with different message:
> 
> Feb 18 12:41:45 correio dovecot: imap-login: Disconnected (no auth
> attempts): rip=201.86.191.114, lip=192.168.1.2, TLS handshaking:
> SSL_accept() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3
> alert bad certificate
> 
>  despite the fact my certificates were generated for use with
> Apache, i can 'print' them, both of them, with the same commands i use
> to print dovecot generated certificates, with mkcert.sh. So, it seems
> they are compatible.
> 
>  if i click OK on Thunderbird, when using my Verisign-signed
> certificates, everything works and i do got TLS logs:
> 
> 
> Feb 18 12:23:36 correio dovecot: imap-login: Login:
> user=, method=PLAIN, rip=201.86.xx.xx,
> lip=192.168.1.2, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
> Feb 18 12:31:43 correio dovecot: imap-login: Login:
> user=, method=PLAIN, rip=201.86.xx.xx,
> lip=192.168.1.2, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
> 
> 
> 
>  what am i doing wrong ?? or using a signed-certificate for WEB
> usage is not possible on dovecot ?

I'm using the same certificate for dovecot and https. My settings in 
dovecot.conf are;

ssl_cert_file = /etc/ssl/certs/hostname.pem
ssl_key_file = /etc/ssl/private/hostname.key

This part from the user guide is very important if you received a "bundle / 
chain" of CA certificates from Verisign;

Chained SSL certificates

Put all the certificates in the ssl_cert_file file. For example when using a 
certificate signed by TDC the correct order is:

   1. Dovecot's public certificate
   2. TDC SSL Server CA
   3. TDC Internet Root CA
   4. Globalsign Partners CA 

Arne

-- 

Arne K. Haaje   | www.drlinux.no
T: 69 51 15 52  | M: 92 88 44 66