search for: ssl3_read_bytes

...tes using starttls on ports 110/143 works ok with thunderbird 10.0.12 (and i guess most other clients) using imaps on port 993 works with outlook 2002. with thunderbird 10.0.12 i can't connect to port 993 and get errors in the logs like TLS: SSL_read() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate (certificate generated by dovecot mkcert.sh) or TLS: SSL_read() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (certificate generated by own openssl cmdline) i know that a lot of information is missing, but since this looks like a more...

...roblems. ted at expectation:~# doveadm backup -D -R -u ted imapc: dsync(ted): Info: imapc(imap.gmail.com:993): Connected to 74.125.71.108:993 (local 10.7.1.179:53852) dsync(ted): Warning: imapc(imap.gmail.com:993): Server disconnected unexpectedly: SSL_connect() failed: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure: SSL alert number 40 - reconnecting (delay 0 ms) dsync(ted): Info: imapc(imap.gmail.com:993): Connected to 74.125.71.109:993 (local 10.7.1.179:59052) dsync(ted): Error: imapc(imap.gmail.com:993): Server disconnected unexpectedly: SSL_connect() failed: error:14094410:SS...

...s fine as well. Would someone also confirm the openssl commands to create a selfsigned cert for dovecot imaps. They cert created does work with evolution; just not thunderbird. Thoughts? Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42 Apr 8 18:10:18 hh dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=000, lip=0000 TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42,...

...ommands to create a selfsigned >> cert for dovecot imaps. They cert created does work with evolution; >> just not thunderbird. >> >> Thoughts? >> >> Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept() >> failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad >> certificate: SSL alert number 42 >> Apr 8 18:10:18 hh dovecot: imap-login: Disconnected (no auth attempts in >> 0 secs): user=<>, rip=000, lip=0000 TLS handshaking: SSL_accept() >> failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad &...

Hello, I am trying to secure SIP session with TLS on Asterisk Server 1.8. I keep getter an error, == Problem setting up ssl connection: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca [2016-05-04 09:31:17] WARNING[30032]: tcptls.c:254 handle_tcptls_connection: FILE * open failed! I tried both signed and self-signed cert to no avail. Here is my Configuration: Sip.conf tlsenable=yes tlsbindaddr=0.0.0.0 tlscertfile=/etc/asterisk/keys/box1.pem tlscapa...

...ot imaps. They cert created does work with evolution; >> >> just not thunderbird. >> >> >> >> Thoughts? >> >> >> >> Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept() >> >> failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad >> >> certificate: SSL alert number 42 >> >> Apr 8 18:10:18 hh dovecot: imap-login: Disconnected (no auth >> attempts in >> >> 0 secs): user=<>, rip=000, lip=0000 TLS handshaking: SSL_accept() >> >> failed: error:14094412:...

...ert.pem)? Also, following are the log errors that I see - 2013-10-30T18:32:25.405Z [FFE81B90 error 'Default'] SSLStreamImpl::DoServerHandshake (ffd005d0) SSL_accept failed. Dumping SSL error queue: 2013-10-30T18:32:25.405Z [FFE81B90 error 'Default'] [0] error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca 2013-10-30T18:32:25.405Z [FFE81B90 warning 'Default'] SSL Handshake failed for stream TCP(local=<ESXi>:443, peer=<client>:33776), error: N7Vmacore3Ssl12SSLExceptionE(SSL Exception: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca) Doesn...

...y acquired an Nokia E71 (which comes with Symbian 3rd edition, feature pack 3 I believe). Accessing my emails has worked before, but now, I cannot connect to the mail server any longer. If I enable verbose_ssl, I get the following error in the log: SSL_accept() failed: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message [141.84.69.67] I cannot access my mail, the dialog just closes and the wireless connection ends. I am using dovecot version 1.0.13 and my config is # 1.0.13: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps ssl_cert_file: /etc/dovecot/dov...

...signed by Verisign for the web usage i've enabled verbose_ssl and got when thunderbird tries to connect: Feb 18 12:32:02 correio dovecot: imap-login: Disconnected (no auth attempts): rip=201.86.xxx.xxx, lip=192.168.1.2, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca unknown CA ??? is that Thunderbird that is not recognizing the Verisign-signed certificate ? Do i need to, somehow, install some Verisign CA certificate in dovecot.conf ? when using a self-signed certificate, i also get an SSL_accept failed, but with dif...

...lution;</div><div>just not thunderbird.</div><div><br></div><div>Thoughts?</div><div><br></div><div>Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept()</div><div>failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad</div><div>certificate: SSL alert number 42</div><div>Apr 8 18:10:18 hh dovecot: imap-login: Disconnected (no auth attempts in</div><div>0 secs): user=<>, rip=000, lip=0000 TLS handshaking: SSL_accept()</div><div>failed: error:140...

...ion:~# doveadm backup -D -R -u ted imapc: > dsync(ted): Info: imapc(imap.gmail.com:993): Connected to > 74.125.71.108:993 (local 10.7.1.179:53852) > dsync(ted): Warning: imapc(imap.gmail.com:993): Server disconnected > unexpectedly: SSL_connect() failed: error:14094410:SSL > routines:ssl3_read_bytes:sslv3 alert handshake failure: SSL alert > number 40 - reconnecting (delay 0 ms) > dsync(ted): Info: imapc(imap.gmail.com:993): Connected to > 74.125.71.109:993 (local 10.7.1.179:59052) > dsync(ted): Error: imapc(imap.gmail.com:993): Server disconnected > unexpectedly: SSL_connect()...

Hi I have set up dovecot with a self signed SSL certificate, created with the mkcert.sh script. Now I see the following in the log: pop3-login: SSL_accept() failed: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown [206.124.112.22] pop3-login: Disconnected: rip=206.124.112.22, lip=204.3.153.71, TLS handshake Is this caused by my self certified certificates. Or is it another problem? Thanks Matthew

...ll apart (turning SELinux off made no difference): *CLI> -- Registered SIP 'encrypted' at 10.0.0.137:58079 > Saved useragent "CSipSimple_crespo-19/r2330" for peer encrypted SSL certificate ok == Problem setting up ssl connection: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure [Mar 24 21:20:42] WARNING[28466]: tcptls.c:272 handle_tcptls_connection: FILE * open failed! [Mar 24 21:20:45] NOTICE[28460]: chan_sip.c:29584 sip_poke_noanswer: Peer 'encrypted' is now UNREACHABLE! Last qualify: 0 SSL certificate ok == Problem setting up...

...hen Thunderbird tries to connect. Thank you, method 1 : self signed openssl req -newkey rsa:4096 -sha512 -x509 -days 365 -nodes -keyout mykey.key -out mycert.pem method 2 : Let's Encrypt (LE) CA Created with Certbot ERROR TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<+oooooo> -------------- next part -------------- A non-text attachment was scrubbed... Name: hanasaki.vcf Type: text/x-vcard Size: 4 bytes Desc: not available URL: <https://dovecot.org/pipermail/dovecot/attachments/20200524/0f3995...

...ver the following error occurs in the log: Sep 25 20:17:49 librelamp dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=2600:1010:b064:f260:e83e:562d:2316:18df, lip=2600:3c01::f03c:91ff:fee4:310c, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca: SSL alert number 48, session=<u7agQAlasK8mABAQsGTyYOg+Vi0jFhjf> I believe this is a client issue, as it worked just fine in CentOS 7.3 client, but I am hoping this has been seen and fixed before.

...error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol Nov 5 08:43:07 s1 dovecot: pop3-login: Error: SSL: Stacked error: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher Nov 5 08:53:31 s1 dovecot: pop3-login: Error: SSL: Stacked error: error:14094085:SSL routines:ssl3_read_bytes:ccs received early What do the above mean? I suppose that somebody tries connect but uses too old/weak ssl version. -- *Pozdrawiam / Best Regards* *Piotr Bracha* -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments...

...gt; On 10/11/2020 19:17 Raymond Herrera <raymond at forcewise.com> wrote: >> >> >> This is a followup to my thread "Recommended Protocols?". >> The error message is as follows: >> dovecot: imap-login: Disconnected: TLS: SSL_read() failed: SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42 >> >> I have selected both SSL/TLS and STARTTLS on the Thunderbird side, with identical results. >> >> The first question that I have is this. Is there any way to know whether that error messages comes from an attempt to read:...

...rror *CLI> == Using SIP RTP CoS mark 5 -- Executing [6004 at from-office:1] Dial("SIP/6003-00000000", "SIP/6004,20") in new stack == Using SIP RTP CoS mark 5 -- Called SIP/6004 SSL certificate ok == Problem setting up ssl connection: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure [Nov 2 21:20:05] WARNING[3571]: tcptls.c:673 handle_tcptls_connection: FILE * open failed! I followed instruction given in " https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial", but no luck. I googled around the issue and found solution ment...

...t;> just not thunderbird.</div><div>>></div><div>>> Thoughts?</div><div>>></div><div>>> Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept()</div><div>>> failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad</div><div>>> certificate: SSL alert number 42</div><div>>> Apr 8 18:10:18 hh dovecot: imap-login: Disconnected (no auth attempts in</div><div>>> 0 secs): user=<>, rip=000, lip=0000 TLS handshaking: SSL_accept()</div>&...

...L routines:SSL23_GET_CLIENT_HELLO:unknown protocol > > Nov 5 08:43:07 s1 dovecot: pop3-login: Error: SSL: Stacked error: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher > > Nov 5 08:53:31 s1 dovecot: pop3-login: Error: SSL: Stacked error: error:14094085:SSL routines:ssl3_read_bytes:ccs received early > > What do the above mean? I suppose that somebody tries connect but uses too > old/weak ssl version. > > -- > > *Pozdrawiam / Best Regards * > *Piotr Bracha* > > > That's what it means, mostly. Could also be a probe of some sort. > > A...