Displaying 18 results from an estimated 18 matches for "hanasaki".
2020 May 25
2
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
...tname isn included in SubjectAlternativeNames, and that the cert hasn't got MUST-STAPLE attribute? You can see this by looking for 1.3.6.1.5.5.7.1.24
>
> Also, can you provide output of
>
> openssl s_client -connect host:993 -trace
>
> Aki
>
>> On 25/05/2020 18:46 hanasaki at gmail.com <hanasaki at gmail.com> wrote:
>>
>>
>> Hello Aki and all,
>>
>> The below lines are in the dovecot config file. This seems to be the
>> same as Aki's suggestion. correct? I have also double checked file
>> perms, tried with sev...
2020 May 25
2
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
...lert 42 means that the *client* consider *server* client untrusted.
>
> If you are using LE cert you should configure
>
> ssl_cert=</etc/letsencrypt/live/domain/fullchain.pem
> ssl_key=</etc/letsencrypt/live/domain/privkey.pem
>
> Aki
>
>> On 25/05/2020 18:01 Hanasaki Jiji <hanasaki at gmail.com> wrote:
>>
>>
>> From the config : auth_ssl_require_client_cert = no
>> GMail empty vcard ... I have no ideas . so sorry.
>>
>> Coding snippets. What can I provide for you that will help?
>> NOTE: it is pretty much th...
2020 Apr 30
5
Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
...m -in csr.csr -out
certificate.pem
openssl req -in csr.csr -text -noout | grep -i "Signature.*SHA" && echo
==2
openssl req -newkey rsa:4096 -sha512 -x509 -days 365 -nodes -keyout
mykey.key -out mycert.pem
On 4/30/20 8:11 AM, Aki Tuomi wrote:
>
>> On 30/04/2020 14:49 hanasaki at gmail.com <mailto:hanasaki at gmail.com>
>> <hanasaki at gmail.com <mailto:hanasaki at gmail.com>> wrote:
>>
>>
>> Recently thunderbird and Dovecot IMAPS cannot agree on SSL however
>> Evolution, on the exact same system, is working fine with the...
2020 Apr 30
4
Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
...and YES added it (assuming that is the public key) to the server list.?
A bit confused by this.
<see attached thunderbird image>
On 4/30/20 2:41 PM, Aki Tuomi wrote:
> I see. You need to import the cert into thundebird's trusted ca certs.
>
> Aki
>> On 30/04/2020 21:36 hanasaki at gmail.com <mailto:hanasaki at gmail.com>
>> <hanasaki at gmail.com <mailto:hanasaki at gmail.com>> wrote:
>>
>>
>> Hello,
>>
>> This is a selfsigned cert. Both of the below methods were used.
>>
>> May I ask for 1. pointer to inf...
2020 Apr 30
0
Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
...t="UTF-8">
</head><body><div>I see. You need to import the cert into thundebird's trusted ca certs.</div><div><br></div><div>Aki</div><blockquote type="cite"><div>On 30/04/2020 21:36 <a href="mailto:hanasaki@gmail.com">hanasaki@gmail.com</a> <<a href="mailto:hanasaki@gmail.com">hanasaki@gmail.com</a>> wrote:</div><div><br></div><div><br></div><div>Hello,</div><div><br></div><div>This...
2020 May 25
2
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
...cert = no
GMail empty vcard ... I have no ideas . so sorry.
Coding snippets. What can I provide for you that will help?
NOTE: it is pretty much the default config from Debian.
Thank you,
On Sun, May 24, 2020 at 9:29 PM Benny Pedersen <me at junc.eu> wrote:
>
> On 2020-05-25 02:54, hanasaki at gmail.com wrote:
> > Config has
> > ssl_verify_client_cert = no
> > What options might have the client auth turned on?
>
> why does gmail attacht empty vcard info ?
>
> without any config snippes its hard to say what config error is local
>
> https://wik...
2020 May 25
0
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
Sorry...
openssl x509 -text -noout -in /etc/letsencrypt/live/...../fullchain.pem
and
openssl s_client -connect host:993
Aki
> On 25/05/2020 18:52 hanasaki at gmail.com <hanasaki at gmail.com> wrote:
>
>
> s_client: Option unknown option -trace
> ***
> x509: Unknown parameter text
>
>
> On 5/25/20 11:49 AM, Aki Tuomi wrote:
> > Hi!
> >
> > Can you do
> >
> > openssl x509 text -noout &l...
2020 May 24
2
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
...: Let's Encrypt (LE) CA
Created with Certbot
ERROR
TLS handshaking: SSL_accept() failed: error:14094412:SSL
routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number
42, session=<+oooooo>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: hanasaki.vcf
Type: text/x-vcard
Size: 4 bytes
Desc: not available
URL: <https://dovecot.org/pipermail/dovecot/attachments/20200524/0f399555/attachment.vcf>
2020 May 25
2
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
...M, Felipe Gasper wrote:
> From what I can tell, ?SSL alert number 42? means that you?ve configured Dovecot to require client authentication.
>
> Otherwise, your Let?s Encrypt certificate (with its authority chain) should suffice.
>
> -FG
>
>> On May 24, 2020, at 5:45 PM, hanasaki at gmail.com wrote:
>>
>> Hello all,
>>
>> What are the instructions for making an SSL cert for Dovecot IMAPS?
>>
>> Two methods have been tried, and work, with Evolution; however generate the following error when Thunderbird tries to connect.
>>
>> T...
2020 May 25
0
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
...nd check these things:
your server hostname isn included in SubjectAlternativeNames, and that the cert hasn't got MUST-STAPLE attribute? You can see this by looking for 1.3.6.1.5.5.7.1.24
Also, can you provide output of
openssl s_client -connect host:993 -trace
Aki
> On 25/05/2020 18:46 hanasaki at gmail.com <hanasaki at gmail.com> wrote:
>
>
> Hello Aki and all,
>
> The below lines are in the dovecot config file. This seems to be the
> same as Aki's suggestion. correct? I have also double checked file
> perms, tried with several new key gens, severa...
2020 Apr 30
2
Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
Recently thunderbird and Dovecot IMAPS cannot agree on SSL however
Evolution, on the exact same system, is working fine with the same
accounts. Tried recreating the Dovecot cert and also the thunderbird
accounts from scratch. The OpenSSL raw client works fine as well.
Would someone also confirm the openssl commands to create a selfsigned
cert for dovecot imaps. They cert created does work
2020 Apr 30
0
Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
<!doctype html>
<html><head>
<meta charset="UTF-8">
</head><body><div><br></div><blockquote type="cite"><div>On 30/04/2020 14:49 <a href="mailto:hanasaki@gmail.com">hanasaki@gmail.com</a> <<a href="mailto:hanasaki@gmail.com">hanasaki@gmail.com</a>> wrote:</div><div><br></div><div><br></div><div>Recently thunderbird and Dovecot IMAPS cannot agree on SSL however&...
2020 May 04
1
Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
...; it no longer does...
well sorta does. See my other posting for a screenshot where it shows
"add server location https:// ...." HTTPS . no way to add from SMTP.
Have also tried typing smtp://host:25 and https://host:25
On 4/30/20 5:39 PM, Joseph Tam wrote:
> On Thu, 30 Apr 2020, hanasaki at gmail.com wrote:
>
>>>> Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept()
>>>> failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad
>>>> certificate: SSL alert number 42
>
> According to this
>
> ????https:...
2020 May 25
0
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
...is that you have misconfigured your cert. Alert 42 means that the *client* consider *server* client untrusted.
If you are using LE cert you should configure
ssl_cert=</etc/letsencrypt/live/domain/fullchain.pem
ssl_key=</etc/letsencrypt/live/domain/privkey.pem
Aki
> On 25/05/2020 18:01 Hanasaki Jiji <hanasaki at gmail.com> wrote:
>
>
> From the config : auth_ssl_require_client_cert = no
> GMail empty vcard ... I have no ideas . so sorry.
>
> Coding snippets. What can I provide for you that will help?
> NOTE: it is pretty much the default config from Debia...
2020 May 24
0
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
From what I can tell, ?SSL alert number 42? means that you?ve configured Dovecot to require client authentication.
Otherwise, your Let?s Encrypt certificate (with its authority chain) should suffice.
-FG
> On May 24, 2020, at 5:45 PM, hanasaki at gmail.com wrote:
>
> Hello all,
>
> What are the instructions for making an SSL cert for Dovecot IMAPS?
>
> Two methods have been tried, and work, with Evolution; however generate the following error when Thunderbird tries to connect.
>
> Thank you,
>
> method...
2020 Apr 30
0
Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
On Thu, 30 Apr 2020, hanasaki at gmail.com wrote:
>>> Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept()
>>> failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad
>>> certificate: SSL alert number 42
According to this
https://serverfault.com/questions/806141/is-th...
2020 May 25
0
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
On 2020-05-25 02:54, hanasaki at gmail.com wrote:
> Config has
> ssl_verify_client_cert = no
> What options might have the client auth turned on?
why does gmail attacht empty vcard info ?
without any config snippes its hard to say what config error is local
https://wiki.dovecot.org/SSL/DovecotConfiguration
is it a...
2020 May 04
0
Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
An HTML attachment was scrubbed...
URL: <https://dovecot.org/pipermail/dovecot/attachments/20200504/3b4acfd9/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pepknmbpelacdlkn.png
Type: image/png
Size: 45253 bytes
Desc: not available
URL: <https://dovecot.org/pipermail/dovecot/attachments/20200504/3b4acfd9/attachment-0001.png>