From: "Bart Smaalders" <bart.smaald...@sun.com> > Well, after much fiddling around, I almost have postfix + dovecot working > on snv 55. The last major thing to fix is SMTP AUTH w/ postfix; I'm > trying to use TLS to authenticate my users so they can > relay from my server. I'm using a self-signed certificate and I can > connect up fine w/ openssl s_client; > Thunderbird is considerable more reluctant, however. I'm seeing the > following error: > > Jan 6 22:12:22 otter postfix/smtpd[24311]: [ID 197553 mail.info] > SSL_accept error from unknown[192.168.1.4]: -1 > Jan 6 22:12:22 otter postfix/smtpd[24311]: [ID 947731 mail.warning] > warning: TLS library problem: 24311:error:1409D08A:SSL routines > :SSL3_SETUP_KEY_BLOCK:cipher or hash > unavailable:../../../../common/openssl/ssl/s3_enc.c:368: > Jan 6 22:12:22 otter postfix/smtpd[24311]: [ID 197553 mail.info] lost > connection after STARTTLS from unknown[192.168.1.4] > > Is Thunderbird insisting on a cipher I don't have by default (SUNWcrypt is > not installed)?
Have you been able to successfully test with other SSL clients? On the topic of SSL and IMAP, does dovecot allow you to easily require certificate based authentication, so that users must connect using a certificate that's known to you? (I've looked, but I can't see anything obvious that allows this to be set.) Darren