Displaying 3 results from an estimated 3 matches for "dividebyzero".
2017 Jan 04
3
Dovecot dsync tcps sends incomplete certificate chain
...://wiki.dovecot.org/Replication) using the tcps method, but
when I launch the replication it fails writing on the log (/var/log/mail.err):
(Server 1 - sync "client" )| Error: sync: Disconnected from remote: Received invalid SSL
certificate: unable to get local issuer certificate: /CN=mail.dividebyzero.it
(Server 2 - sync "server")| Error: doveadm client disconnected before handshake: <no error>
If I try to connect to the server using openssl s_client, on the port 993 (imaps) the server
correctly sends the full chain:
$ openssl s_client -connect server1.fqdn:993
CONNECTED(0000000...
2017 Jan 05
0
Dovecot dsync tcps sends incomplete certificate chain
...tion) using the tcps method, but
>> when I launch the replication it fails writing on the log (/var/log/mail.err):
>> (Server 1 - sync "client" )| Error: sync: Disconnected from remote: Received invalid SSL
>> certificate: unable to get local issuer certificate: /CN=mail.dividebyzero.it
>> (Server 2 - sync "server")| Error: doveadm client disconnected before handshake: <no error>
>>
>> If I try to connect to the server using openssl s_client, on the port 993 (imaps) the server
>> correctly sends the full chain:
>> $ openssl s_clien...
2017 Jan 06
2
Dovecot dsync tcps sends incomplete certificate chain
...7 01:21, "John Fawcett" <john at voipsupport.it> wrote:
>
>> On 01/04/2017 08:40 PM, Juri wrote:
>>
>>
> Thank you.
>
> In fact I tried both settings, that is
> |ssl_client_ca_dir = /etc/ssl/certs
> |ssl_client_ca_file = /etc/letsencrypt/live/mail.dividebyzero.it/chain.pem
> but with no luck.
> Actually, I noticed that with the two settings I get a slightly different error message (it took me
> quite a bit to notice it!), that is:
> |Error: sync: Disconnected from remote: Received invalid SSL certificate: unable to get issuer
> certificate...