dovecot - May 2020 - How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

>From the config : auth_ssl_require_client_cert = no
GMail empty vcard ... I have no ideas . so sorry.

Coding snippets.   What can I provide for you that will help?
NOTE: it is pretty much the default  config from Debian.

Thank you,

On Sun, May 24, 2020 at 9:29 PM Benny Pedersen <me at junc.eu>
wrote:
>
> On 2020-05-25 02:54, hanasaki at gmail.com wrote:
> > Config has
> >       ssl_verify_client_cert = no
> > What options might have the client auth turned on?
>
> why does gmail attacht empty vcard info ?
>
> without any config snippes its hard to say what config error is local
>
> https://wiki.dovecot.org/SSL/DovecotConfiguration
>
> is it auth_ssl_require_client_cert = yes
>
> i dont use this auth features to make thunderbird work

The real reason is that you have misconfigured your cert. Alert 42 means that
the *client* consider *server* client untrusted.

If you are using LE cert you should configure

ssl_cert=</etc/letsencrypt/live/domain/fullchain.pem
ssl_key=</etc/letsencrypt/live/domain/privkey.pem

Aki
> On 25/05/2020 18:01 Hanasaki Jiji <hanasaki at gmail.com> wrote:
> 
>  
> From the config : auth_ssl_require_client_cert = no
> GMail empty vcard ... I have no ideas . so sorry.
> 
> Coding snippets.   What can I provide for you that will help?
> NOTE: it is pretty much the default  config from Debian.
> 
> Thank you,
> 
> On Sun, May 24, 2020 at 9:29 PM Benny Pedersen <me at junc.eu> wrote:
> >
> > On 2020-05-25 02:54, hanasaki at gmail.com wrote:
> > > Config has
> > >       ssl_verify_client_cert = no
> > > What options might have the client auth turned on?
> >
> > why does gmail attacht empty vcard info ?
> >
> > without any config snippes its hard to say what config error is local
> >
> > https://wiki.dovecot.org/SSL/DovecotConfiguration
> >
> > is it auth_ssl_require_client_cert = yes
> >
> > i dont use this auth features to make thunderbird work

Hello Aki and all,

The below lines are in the dovecot config file.   This seems to be the 
same as Aki's suggestion. correct?  I have also double checked file 
perms, tried with several new key gens, several versions of thunderbird 
and created completely new thunderbird profiles.

Thank you,

ssl_cert = </etc/letsencrypt/live/...../fullchain.pem
ssl_key = </etc/letsencrypt/live/...../privkey.pem


On 5/25/20 11:11 AM, Aki Tuomi wrote:
> The real reason is that you have misconfigured your cert. Alert 42 means
that the *client* consider *server* client untrusted.
> 
> If you are using LE cert you should configure
> 
> ssl_cert=</etc/letsencrypt/live/domain/fullchain.pem
> ssl_key=</etc/letsencrypt/live/domain/privkey.pem
> 
> Aki
> 
>> On 25/05/2020 18:01 Hanasaki Jiji <hanasaki at gmail.com> wrote:
>>
>>   
>>  From the config : auth_ssl_require_client_cert = no
>> GMail empty vcard ... I have no ideas . so sorry.
>>
>> Coding snippets.   What can I provide for you that will help?
>> NOTE: it is pretty much the default  config from Debian.
>>
>> Thank you,
>>
>> On Sun, May 24, 2020 at 9:29 PM Benny Pedersen <me at junc.eu>
wrote:
>>>
>>> On 2020-05-25 02:54, hanasaki at gmail.com wrote:
>>>> Config has
>>>>        ssl_verify_client_cert = no
>>>> What options might have the client auth turned on?
>>>
>>> why does gmail attacht empty vcard info ?
>>>
>>> without any config snippes its hard to say what config error is
local
>>>
>>> https://wiki.dovecot.org/SSL/DovecotConfiguration
>>>
>>> is it auth_ssl_require_client_cert = yes
>>>
>>> i dont use this auth features to make thunderbird work
-------------- next part --------------
A non-text attachment was scrubbed...
Name: hanasaki.vcf
Type: text/x-vcard
Size: 4 bytes
Desc: not available
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20200525/f99c07d9/attachment-0001.vcf>