Re: OP/PSA: Net Systems Research mail port diddlers

2017-01-06 Thread Sean Greenslade
On January 5, 2017 4:52:41 PM HST, "li...@lazygranch.com" wrote: >http://netsystemsresearch.com/ > >dovecot.log.1.bz2:Jan 05 17:28:15 pop3-login: Info: Disconnected (no >auth attempts in 3 secs): user=<>, rip=169.54.233.124, lip=MYIP, TLS >handshaking: Disconnected, session= > >Their "research" p

Auth-policy: auth_policy_server_url and https support

2017-01-06 Thread gregc
When using Auth policy server it doesn’t currently doesn’t support https. In version 2.2.27: Policy server HTTP error: 9002 Couldn't initialize SSL context: Can't verify remote server certs without trusted CAs (ssl_client_ca_* settings) and in version 2.3.devel Policy server HTTP error: 9002

Re: Dovecot dsync tcps sends incomplete certificate chain

2017-01-06 Thread Juri
In data venerdì 6 gennaio 2017 01:34:48 CET, John Fawcett ha scritto: > On 01/05/2017 08:55 PM, Juri wrote: > > 5 Gennaio 2017 01:21, "John Fawcett" wrote: > >> On 01/04/2017 08:40 PM, Juri wrote: > Hi Juri > > if you find validation failing when you have only the root certificate > in the CA fi

Re: IMAP proxy for Exchange - encrypted backend Communication?

2017-01-06 Thread Thomas Koenig
thx, I'll try it. Currently I use stunnel as a quick and dirty work around. Tom Am 6. Januar 2017 18:04:57 MEZ schrieb Sami Ketola : > >> On 5 Jan 2017, at 22.56, tom wrote: >> >> Hello, >> >> I try to setup a IMAP proxy for my old Exchange server. >> Running Dovecot v2.x on Centos 7. >> >>

Re: IMAP proxy for Exchange - encrypted backend Communication?

2017-01-06 Thread Sami Ketola
> On 5 Jan 2017, at 22.56, tom wrote: > > Hello, > > I try to setup a IMAP proxy for my old Exchange server. > Running Dovecot v2.x on Centos 7. > > So far I follow http://wiki2.dovecot.org/HowTo/ImapcProxy and it seem > to work. The only but major thing is with this setup - the > communicati

Re: Dovecot dsync tcps sends incomplete certificate chain

2017-01-06 Thread Aki Tuomi
> On January 6, 2017 at 2:34 AM John Fawcett wrote: > > > On 01/05/2017 08:55 PM, Juri wrote: > > 5 Gennaio 2017 01:21, "John Fawcett" wrote: > > > >> On 01/04/2017 08:40 PM, Juri wrote: > >> > >> > > Thank you. > > > > In fact I tried both settings, that is > > |ssl_client_ca_dir = /etc/ssl/ce