Re: TLS: unable to get certificate ...

2008-04-14 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wesley Craig wrote: | On 13 Apr 2008, at 17:19, Goetz Babin-Ebell wrote: | Cyrus barfing on no CA data set with no client authentication is a bug. | | Hard not to agree. :) Submit a patch, please. OK, I've opened a ticked and submitted the patch:

Re: TLS: unable to get certificate ...

2008-04-13 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wesley Craig schrieb: | From the article: | I’ve *finally* discovered why my IMAP server no longer likes my | self-signed certificates. The certificates are just fine. Cyrus is | just fine. It’s OpenSSL that’s the problem - Bug 1513 to be exact. | |

Re: TLS: unable to get certificate ...

2008-04-13 Thread Wesley Craig
On 13 Apr 2008, at 17:19, Goetz Babin-Ebell wrote: Cyrus barfing on no CA data set with no client authentication is a bug. Hard not to agree. :) Submit a patch, please. :wes Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List

Re: TLS: unable to get certificate ...

2008-04-12 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 brian schrieb: | Goetz Babin-Ebell wrote: | brian schrieb: | | brian wrote: | | I'm trying (and failing) to set up TLS and hope someone might be able to | | shed some light on my problem. Authentication failed so I checked | | maillog and found: | |

Re: TLS: unable to get certificate ...

2008-04-12 Thread brian
Goetz Babin-Ebell wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 brian schrieb: | Goetz Babin-Ebell wrote: | brian schrieb: | | brian wrote: | | I'm trying (and failing) to set up TLS and hope someone might be able to | | shed some light on my problem. Authentication failed so I

Re: TLS: unable to get certificate ...

2008-04-12 Thread Wesley Craig
What's the ticket number/URL? :wes On 12 Apr 2008, at 09:11, Goetz Babin-Ebell wrote: Looking in the last source I have here (2.3.8), I'm definitively not happy about the code that generates that message: * If you don't do SSL client authentication, this message ~ is only confusing noise.

Re: TLS: unable to get certificate ...

2008-04-12 Thread Wesley Craig
From the article: I’ve *finally* discovered why my IMAP server no longer likes my self-signed certificates. The certificates are just fine. Cyrus is just fine. It’s OpenSSL that’s the problem - Bug 1513 to be exact. Cyrus calls SSL_CTX_use_certificate_chain_file() to read in the

Re: TLS: unable to get certificate ...

2008-04-11 Thread brian
brian wrote: cyrus-imapd-2.3.9-7.fc7 openssl-0.9.8b-15.fc7 I'm trying (and failing) to set up TLS and hope someone might be able to shed some light on my problem. Authentication failed so I checked maillog and found: imap[30288]: TLS server engine: cannot load CA data imap[30288]:

Re: TLS: unable to get certificate ...

2008-04-11 Thread brian
brian wrote: brian wrote: cyrus-imapd-2.3.9-7.fc7 openssl-0.9.8b-15.fc7 I'm trying (and failing) to set up TLS and hope someone might be able to shed some light on my problem. Authentication failed so I checked maillog and found: imap[30288]: TLS server engine: cannot load CA data

Re: TLS: unable to get certificate ...

2008-04-11 Thread Andrew Morgan
On Fri, 11 Apr 2008, brian wrote: brian wrote: brian wrote: cyrus-imapd-2.3.9-7.fc7 openssl-0.9.8b-15.fc7 I'm trying (and failing) to set up TLS and hope someone might be able to shed some light on my problem. Authentication failed so I checked maillog and found: imap[30288]: TLS server

Re: TLS: unable to get certificate ...

2008-04-11 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 brian schrieb: | brian wrote: | cyrus-imapd-2.3.9-7.fc7 | openssl-0.9.8b-15.fc7 | | I'm trying (and failing) to set up TLS and hope someone might be able to | shed some light on my problem. Authentication failed so I checked | maillog and found: | |

Re: TLS: unable to get certificate ...

2008-04-11 Thread brian
Goetz Babin-Ebell wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 brian schrieb: | brian wrote: | cyrus-imapd-2.3.9-7.fc7 | openssl-0.9.8b-15.fc7 | | I'm trying (and failing) to set up TLS and hope someone might be able to | shed some light on my problem. Authentication failed so I

TLS: unable to get certificate ...

2008-04-10 Thread brian
cyrus-imapd-2.3.9-7.fc7 openssl-0.9.8b-15.fc7 I'm trying (and failing) to set up TLS and hope someone might be able to shed some light on my problem. Authentication failed so I checked maillog and found: imap[30288]: TLS server engine: cannot load CA data imap[30288]: unable to get certificate