Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-26 Thread hanas...@gmail.com
col : TLSv1.3 Cipher: TLS_AES_256_GCM_SHA384 ... * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot (Debian) ready. ... subject=CN = fullHostnameWith.com on the end MUST-STAPLE <= not present nor 1.3.6 Aki On 25/05/2020 18:52 hanas...@gma

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-25 Thread hanas...@gmail.com
s_client: Option unknown option -trace *** x509: Unknown parameter text On 5/25/20 11:49 AM, Aki Tuomi wrote: Hi! Can you do openssl x509 text -noout On 25/05/2020 18:46 hanas...@gmail.com wrote: Hello Aki and all, The below lines are in the dovecot config file. This seems

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-25 Thread hanas...@gmail.com
= no GMail empty vcard ... I have no ideas . so sorry. Coding snippets. What can I provide for you that will help? NOTE: it is pretty much the default config from Debian. Thank you, On Sun, May 24, 2020 at 9:29 PM Benny Pedersen wrote: On 2020-05-25 02:54, hanas...@gmail.com wrote: Config has

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-24 Thread hanas...@gmail.com
certificate (with its authority chain) should suffice. -FG On May 24, 2020, at 5:45 PM, hanas...@gmail.com wrote: Hello all, What are the instructions for making an SSL cert for Dovecot IMAPS? Two methods have been tried, and work, with Evolution; however generate the following error when

How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-24 Thread hanas...@gmail.com
Hello all, What are the instructions for making an SSL cert for Dovecot IMAPS? Two methods have been tried, and work, with Evolution; however generate the following error when Thunderbird tries to connect. Thank you, method 1 : self signed openssl req -newkey rsa:4096 -sha512 -x509 -days

Re: Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK

2020-05-04 Thread hanas...@gmail.com
yping smtp://host:25 and https://host:25 On 4/30/20 5:39 PM, Joseph Tam wrote: On Thu, 30 Apr 2020, hanas...@gmail.com wrote: Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42

Re: Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK

2020-05-04 Thread hanas...@gmail.com
== resend to list = requested by list owner On 4/30/20 2:47 PM, hanas...@gmail.com wrote: I would expect the public cert to be imported as a "server" not an "auth" The attached image shows that TBir

Re: Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK

2020-04-30 Thread hanas...@gmail.com
ssuming that is the public key) to the server list.  A bit confused by this. On 4/30/20 2:41 PM, Aki Tuomi wrote: I see. You need to import the cert into thundebird's trusted ca certs. Aki On 30/04/2020 21:36 hanas...@gmail.com <mailto:hanas...@gmail.com> mailto:hanas...@gmail.com>> w

Re: Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK

2020-04-30 Thread hanas...@gmail.com
ext -noout | grep -i "Signature.*SHA" && echo ==2 openssl req -newkey rsa:4096 -sha512 -x509 -days 365 -nodes -keyout mykey.key -out mycert.pem On 4/30/20 8:11 AM, Aki Tuomi wrote: On 30/04/2020 14:49 hanas...@gmail.com <mailto:hanas...@gmail.com> mailto:hanas...@gmail.co

Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK

2020-04-30 Thread hanas...@gmail.com
Recently thunderbird and Dovecot IMAPS cannot agree on SSL however Evolution, on the exact same system, is working fine with the same accounts. Tried recreating the Dovecot cert and also the thunderbird accounts from scratch. The OpenSSL raw client works fine as well. Would someone also

self signed certs and dovecot imaps : howto? tlsv1 alert unknown ca

2016-07-30 Thread hanas...@gmail.com
How do you setup dovecot to use a self signed cert? One server will be connected to the internet. One will be totally internal and have no runtime access to the internet. Getting the below error msg. Also, I think I have a TLS 1.0 and need a 1.2 cert?... Thank you. Jul 28 20:09:27 host