On Thu, 11 Jan 2018 13:22:07 +0200, Aki Tuomi wrote:> Can you try if it works if you concatenate the cert and cert-chain > to single file? We'll start looking if this is misunderstanding or bug.This is a production machine, so I would rather stick with the downgrade until you've looked into the issue. I went home late yesterday. ;) Cheerio, Hauke -- The ASCII Ribbon Campaign Hauke Fath () No HTML/RTF in email Institut f?r Nachrichtentechnik /\ No Word docs in email TU Darmstadt Respect for open standards Ruf +49-6151-16-21344
On 11.01.2018 13:28, Hauke Fath wrote:> On Thu, 11 Jan 2018 13:22:07 +0200, Aki Tuomi wrote: >> Can you try if it works if you concatenate the cert and cert-chain >> to single file? We'll start looking if this is misunderstanding or bug. > This is a production machine, so I would rather stick with the > downgrade until you've looked into the issue. I went home late > yesterday. ;) > > Cheerio, > Hauke >Fine. You might want to invest into a test environment, by the way. It's far more safe to try out new major releases and stuff. =) Aki
On Thu, 11 Jan 2018 13:29:02 +0200, Aki Tuomi wrote:> You might want to invest into a test environment, by the way. It's > far more safe to try out new major releases and stuff. =)Fair enough. With SSL certs, this gets a bit involved, though. This is a small site with a few dozen users, so I have a bit of flexibility. And in the present case a test bed wouldn't have saved me: The first reports came in a week after roll-out, mainly from users of android clients. I don't know if the desktop clients cache the intermediate certs, or if they just don't care. Cheerio, hauke -- The ASCII Ribbon Campaign Hauke Fath () No HTML/RTF in email Institut f?r Nachrichtentechnik /\ No Word docs in email TU Darmstadt Respect for open standards Ruf +49-6151-16-21344
On 11 January 2018 at 14:29, Aki Tuomi <aki.tuomi at dovecot.fi> wrote:> > > On 11.01.2018 13:28, Hauke Fath wrote: > > On Thu, 11 Jan 2018 13:22:07 +0200, Aki Tuomi wrote: > >> Can you try if it works if you concatenate the cert and cert-chain > >> to single file? We'll start looking if this is misunderstanding or bug. > > This is a production machine, so I would rather stick with the > > downgrade until you've looked into the issue. I went home late > > yesterday. ;) > > > > Cheerio, > > Hauke > > > > Fine. You might want to invest into a test environment, by the way. It's > far more safe to try out new major releases and stuff. =) > > Aki >...and I am still unable to successfully compile 2.3RC on FreeBSD 8.4 and 9.3 ....and my reports were ignored, so should I assume support for those has been dropped? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft." -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20180122/71f86588/attachment.html>