SSL issues when proxying

Steffen Kaiser
Thu, 25 Sep 2014 12:33:37 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 25 Sep 2014, Ralf Hildebrandt wrote:

> Date: Thu, 25 Sep 2014 14:22:30 +0200
> From: Ralf Hildebrandt <r at sys4.de>
> To: dovecot at dovecot.org
> Subject: SSL issues when proxying
>
> I'm getting this in the log when proxying IMAP (three "valid
> certificate" messages, two "Invalid certificate" messages)

does one of your proxies or servers is missing a root CA? Or do your hosts
query a cert database or something like that?
Can you validate the cert on all hosts via openssl manually?

- --
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQEVAwUBVCQLoXz1H7kL/d9rAQItWwf/QGaCcxwIvAE2DJgd4rjvL/3/blnPZIQL
16TjRbSpg2c/GCPWMkMlIlavhoooGyqxEyyHNV0hvBGqg9Im/6uzUwJMD4899f9g
rB3nN6jMrLPP99LyIPgzpJe+Xnp/5HGMRMS8YKsri6zP7Ltx2mP6rzKDxWr9wd1L
aaEozOR+wwVb2N4Fz6wYBX5kKLA28tVdjxLA+mX9xjDw3LzSPXFtgK2Bg3zC+6ln
baX2FIlhsiWid7uzl5UblRcAn/oocaXyn/lr3s0jZ6sX2Uh/Ppvx48eJqlEcowiH
BrvRfDRiyyLS10VmgGG+WxSDYjD5J5sfeQ6LxkwaBkNg3P5VcREyNA==4JwM
-----END PGP SIGNATURE-----