dovecot - Dec 2016 - Dovecot 2.2.27 & windows 10 outlook (no auth attempts in 0 secs) error.

Hello.


Few days ago upgraded from v2.2.26.0 >v2.2.27 and now windows 10, with
any outlook version (2007,2010,2013,2016) doesn't connect IMAP SSL:


Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: elliptic curve
secp384r1 will be used for ECDH and ECDHE key exchanges
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: elliptic curve
secp384r1 will be used for ECDH and ECDHE key exchanges
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x10,
ret=1: before/accept initialization [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
ret=1: before/accept initialization [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
ret=1: SSLv3 read client hello A [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
ret=1: SSLv3 write server hello A [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
ret=1: SSLv3 write certificate A [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
ret=1: SSLv3 write key exchange A [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
ret=1: SSLv3 write server done A [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
ret=1: SSLv3 flush data [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2002,
ret=-1: SSLv3 read client certificate A [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2002,
ret=-1: SSLv3 read client certificate A [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Warning: SSL failed:
where=0x2002: SSLv3 read client certificate A [x.x.x.x]
Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL error: Disconnected
Dec 12 12:29:35 server dovecot: imap-login: Disconnected (no auth
attempts in 0 secs): x.x.x.x, TLS handshaking: Disconnected

Is this a bug or some new feature? How to fix it?

-- 
Mart

Can you


On 12.12.2016 13:00, Mart Pirita wrote:
> Hello.
>
>
> Few days ago upgraded from v2.2.26.0 >v2.2.27 and now windows 10, with
> any outlook version (2007,2010,2013,2016) doesn't connect IMAP SSL:
>
>
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: elliptic curve
> secp384r1 will be used for ECDH and ECDHE key exchanges
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: elliptic curve
> secp384r1 will be used for ECDH and ECDHE key exchanges
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x10,
> ret=1: before/accept initialization [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
> ret=1: before/accept initialization [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
> ret=1: SSLv3 read client hello A [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
> ret=1: SSLv3 write server hello A [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
> ret=1: SSLv3 write certificate A [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
> ret=1: SSLv3 write key exchange A [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
> ret=1: SSLv3 write server done A [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2001,
> ret=1: SSLv3 flush data [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2002,
> ret=-1: SSLv3 read client certificate A [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL: where=0x2002,
> ret=-1: SSLv3 read client certificate A [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Warning: SSL failed:
> where=0x2002: SSLv3 read client certificate A [x.x.x.x]
> Dec 12 12:29:35 server dovecot: imap-login: Debug: SSL error: Disconnected
> Dec 12 12:29:35 server dovecot: imap-login: Disconnected (no auth
> attempts in 0 secs): x.x.x.x, TLS handshaking: Disconnected
>
> Is this a bug or some new feature? How to fix it?
>
Can you do

doveconf -a | grep auth_mech

Aki

Aki Tuomi wrote:
>
> Can you do
>
> doveconf -a | grep auth_mech
>
auth_mechanisms = plain login

P.S. Seems this 2.2.24 is the last win10 compatible version (as my
testserver doesn't have win10 users and thunderbird works well), any
never version gives an error. However I didn't find any hint from
http://www.dovecot.org/list/dovecot-news/2016-July/000324.html etc.



-- 
Mart