search for: ssl_get_servername

I have a smoothly running dovecot 2.3.7.2 & sendmail IMAP with SSL combo on Fedora 30. However, I see oodles of these when ssl verbosity is turned up: lmtp(25738): Debug: SSL_get_servername() failed Should I be concerned or is there a setting that stops that? -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20200318/42818258/attachment.html>

...checking my connexion from the samba server, or from outside, I've got "unable to verify the first certificate" even if tls_cafile is provided in smb.conf. What is wrong ? # checking my connexion openssl s_client -showcerts -connect localhost:636 CONNECTED(00000003) Can't use SSL_get_servername depth=0 C = FR, postalCode = 00000, ST = XXX, L = XXX, O = XXX, OU = XXX, CN = ad-rep2.example.com verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 C = FR, postalCode = 00000, ST = XXX, L = XXX, O = XXX, OU = XXX, CN = ad-rep2.example.com verify error:num=21:unable...

...utside, > I've got "unable to verify the first certificate" even if tls_cafile is > provided in smb.conf. > > What is wrong ? > > # checking my connexion > > openssl s_client -showcerts -connect localhost:636 > > CONNECTED(00000003) > Can't use SSL_get_servername > depth=0 C = FR, postalCode = 00000, ST = XXX, L = XXX, O = XXX, OU = > XXX, CN = ad-rep2.example.com > verify error:num=20:unable to get local issuer certificate > verify return:1 > depth=0 C = FR, postalCode = 00000, ST = XXX, L = XXX, O = XXX, OU = > XXX, CN = ad-rep2.example....

...le to verify the first certificate" even if tls_cafile is >> provided in smb.conf. >> >> What is wrong ? >> >> # checking my connexion >> >> openssl s_client -showcerts -connect localhost:636 >> >> CONNECTED(00000003) >> Can't use SSL_get_servername >> depth=0 C = FR, postalCode = 00000, ST = XXX, L = XXX, O = XXX, OU = >> XXX, CN = ad-rep2.example.com >> verify error:num=20:unable to get local issuer certificate >> verify return:1 >> depth=0 C = FR, postalCode = 00000, ST = XXX, L = XXX, O = XXX, OU = >> XX...

...le to verify the first certificate" even if tls_cafile is >> provided in smb.conf. >> >> What is wrong ? >> >> # checking my connexion >> >> openssl s_client -showcerts -connect localhost:636 >> >> CONNECTED(00000003) >> Can't use SSL_get_servername >> depth=0 C = FR, postalCode = 00000, ST = XXX, L = XXX, O = XXX, OU = >> XXX, CN = ad-rep2.example.com >> verify error:num=20:unable to get local issuer certificate >> verify return:1 >> depth=0 C = FR, postalCode = 00000, ST = XXX, L = XXX, O = XXX, OU = >> XX...

attempting to compile dovecot 2.2.31 on Sun/Oracle Solaris 10 SPARC. configure goes fine. First sign of problems during compile is with this warning: ............................................... *** libssl_iostream_openssl.so is not portable! ............................................... actual ERRORS - Soon, compile errors out with undefined symbols. Output at bottom of note.

Is there a reference manual for changes in configuration between dovecot 1.2.X to 2.0 rc5. I know there is a config upgrade tool but I would rather learn the new changes and then implement them? -- Jerrale G. Jerrale G. SC Senior Admin