I am trying to get Dovecot IMAP and Outlook to talk to each other with SSL and client certificates enabled. In Dovecot, I have the following options enabled: ssl_ca = ... ssl_verify_client_cert = yes auth_ssl_require_client_cert = yes auth_ssl_username_from_cert = yes when I try to connect with Outlook, I get: May 12 08:07:50 mail dovecot: imap-login: Disconnected (client didn't send a cert): user=<>, method=PLAIN, rip=192.168.1.245, lip=192.168.2.5, TLS: Disconnected, session=<is7gpa+Im97AqAH1> But when I use openssl directly with the same certificates it seems to pass the certificate in just fine. Does anybody have any ideas? Thanks in advance. -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20190515/3612998d/attachment.html>
On 16.5.2019 3.36, dovecot--- via dovecot wrote:> > I am trying to get Dovecot IMAP and Outlook to talk to each other with > SSL and client certificates enabled. In Dovecot, I have the following > options enabled: > > ? > > ssl_ca = ... > > ssl_verify_client_cert = yes > > auth_ssl_require_client_cert = yes > > auth_ssl_username_from_cert = yes > > ? > > when I try to connect with Outlook, I get: > > ? > > May 12 08:07:50 mail dovecot: imap-login: Disconnected (client didn't > send a cert): user=<>, method=PLAIN, rip=192.168.1.245, > lip=192.168.2.5, TLS: Disconnected, session=<is7gpa+Im97AqAH1> > > ? > > But when I use openssl directly with the same certificates it seems to > pass the certificate in just fine. Does anybody have any ideas? > > ? > > Thanks in advance. > > ? >Maybe Outlook is misconfigured? Does it ask for a certificate when you connect? Aki -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20190516/5390f0cd/attachment.html>
Reasonably Related Threads
- Why does dovecot reject password when authorizing by a certificate?
- Why does dovecot reject password when authorizing by a certificate?
- ssl enabled, but ssl_cert not set ( 2.0.7 freebsd 8.1 )
- [RFC master-2.2 0/1] Support OpenSSL 1.1 API for setting allowed TLS versions
- %{orig_user} missing in checkpassword-Script