Displaying 20 results from an estimated 4000 matches similar to: "Thunderbird SSL/TLS client authentication fails"
2010 Dec 15
2
ssl enabled, but ssl_cert not set ( 2.0.7 freebsd 8.1 )
hello
trying to install dovecot 2 on a fresh installed machine
I get this error message :
doveconf -n > dovecot-new.conf
doveconf: Error: ssl enabled, but ssl_cert not set
doveconf: Fatal: Error in configuration file
/usr/local/etc/dovecot/dovecot.conf: ssl enabled, but ssl_cert not set
the ssl config file look like the following :
Thanks for any info.
##
## SSL settings
##
# SSL/TLS
2015 Feb 13
0
[SOLVED] Thunderbird client certification validation fails with same profile but changed IMAP server software (Re: It works for two SMTP servers and cyrus-imap, why not Dovecot?)
In hopes that searching may turn up the solution for others:
The reason client certificate validation was failing in Thunderbird when
it had previously succeeded with other servers (both IMAP and SMTP) is
precisely that: the client and profile where the same ones used to
connect to the server who's hostname hadn't changed, and email addresses
and usernames were the same, and Thunderbird
2006 May 11
0
mandatory client certificates and crl check in ssl-proxy-openssl.c
hello,
I made a modification to ssl-proxy-openssl.c (patch attached) zo that it
a) disconnects when no client certificate is presented
b) checks the client certificate against the crl for our root cert. (so
you can't use a revoked client cert.)
c) returns the CommonName from the client cert. in
ssl_proxy_get_peer_name (this way it's easier to use dovecot as
imap-proxy with a
2013 Dec 02
1
imap-login hangs after receiving revoked SSL certificate
Good time of the day!
My English is not very good, excuse me if I said something wrong.
I use dovecot-2.1.16 on Gentoo Linux amd64.
I need to setup dovecot (imap and pop3) for SSL and non-SSL connection
simultaneously. For SSL connections client must submit a valid SSL
certificate. Now SSL part of dovecot.conf looks like this:
-----------------
ssl = yes
ssl_cert =
2006 Jun 13
1
SSL fingerpring mismatch and issuer certificate problem
I have a remote server running centos 4.3 and a home desktop running
suse 10.1. I have generated an SSL certificate on the server, copied
it on the desktop and run on the desktop:
>openssl x509 -in mynewcertCert.pem -fingerprint -subject -issuer -serial -hash -noout
>c_rehash .
getting this warning:
>
> Doing .
> WARNING: mynewcertPrivateKey.pem does not contain a certificate or
2019 Feb 05
0
CVE-2019-3814: Suitable client certificate can be used to login as other user
Dear subscribers,
we're sharing our latest advisory with you and would like to thank
everyone who contributed in finding and solving those vulnerabilities.
Feel free to join our bug bounty programs (open-xchange, dovecot,
powerdns) at HackerOne. Please find patches for v2.2.36 and v2.3.4 attached,
or download new version from https://dovecot.org
Yours sincerely,
Aki Tuomi
Open-Xchange Oy
2014 Oct 11
0
]UG] Dovecot 2.2.9 SSL client cert verification fails: openssl verify: OK
Greetings all,
I have verified a bug that has long been attributed to lack of knowledge
on the part of the user.
Dovecot rejects StartSSL client certificates due to reject StartSSL root
CA when doing client verification even though the appropriately
constructed ca-bundle.pem has been created and applied vi ssl_ca =
</etc/dovecot/ca-bundle.pem.
openssl verify -CAfile ca-bundle.pem
2019 Jun 16
0
Self-signed TLS client certificates
<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
<br>
</div>
<blockquote type="cite">
<div>
On 16 June 2019 15:47 Marvin Gülker via dovecot <
<a href="mailto:dovecot@dovecot.org">dovecot@dovecot.org</a>> wrote:
</div>
2020 May 25
2
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
>From the config : auth_ssl_require_client_cert = no
GMail empty vcard ... I have no ideas . so sorry.
Coding snippets. What can I provide for you that will help?
NOTE: it is pretty much the default config from Debian.
Thank you,
On Sun, May 24, 2020 at 9:29 PM Benny Pedersen <me at junc.eu> wrote:
>
> On 2020-05-25 02:54, hanasaki at gmail.com wrote:
> > Config has
>
2019 Jun 16
2
Self-signed TLS client certificates
Dear List,
I self-host my e-mail and run Dovecot since ever I do that. Dovecot
version is 2.3.4.1 (f79e8e7e4), running on Debian testing.
Now I am trying to configure Dovecot for client TLS certificates. I have
a self-signed certificate whose private key resides on a smartcard
(Yubikey, to be exact). I wanted Dovecot to accept that TLS client
certificate instead of a password. So I searched and
2007 May 29
2
Client certificate verification/authentication
I would like to use Client certificate verification/authentication.
My MTA used this function.
I've a problem to make a valid certificate.
For my MTA i used :
openssl req -new -nodes -x509 -keyout user_key.pem -out user_req.pem
-days 365
openssl ca -out user_signed.pem -infiles user_req.pem
openssl pkcs12 -in user_signed.pem -inkey user_key.pem -out user.p12
-export -name "user at
2006 Jun 13
1
Server CommonName mismatch: localhost.localdomain
Hello,
I have seen via google that this very problem was already discussed on
this and other lists some months ago, but the archives report no solution.
I have dovecot 1.0-0_12.beta8 on Centos 4.3. IMAP works just fine: I
can read email from both Squirrelmail via web and Kmail.
Now I have created an ssl certificate and I'm trying to use it via
pop3.
When I launch fetchmail I get the error
2020 May 25
2
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
Hello Aki and all,
The below lines are in the dovecot config file. This seems to be the
same as Aki's suggestion. correct? I have also double checked file
perms, tried with several new key gens, several versions of thunderbird
and created completely new thunderbird profiles.
Thank you,
ssl_cert = </etc/letsencrypt/live/...../fullchain.pem
ssl_key =
2020 May 25
0
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
The real reason is that you have misconfigured your cert. Alert 42 means that the *client* consider *server* client untrusted.
If you are using LE cert you should configure
ssl_cert=</etc/letsencrypt/live/domain/fullchain.pem
ssl_key=</etc/letsencrypt/live/domain/privkey.pem
Aki
> On 25/05/2020 18:01 Hanasaki Jiji <hanasaki at gmail.com> wrote:
>
>
> From the config
2020 May 25
0
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
Hi!
Can you do
openssl x509 text -noout </etc/letsencrypt/live/...../fullchain.pem
and check these things:
your server hostname isn included in SubjectAlternativeNames, and that the cert hasn't got MUST-STAPLE attribute? You can see this by looking for 1.3.6.1.5.5.7.1.24
Also, can you provide output of
openssl s_client -connect host:993 -trace
Aki
> On 25/05/2020 18:46 hanasaki
2020 May 25
0
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
Sorry...
openssl x509 -text -noout -in /etc/letsencrypt/live/...../fullchain.pem
and
openssl s_client -connect host:993
Aki
> On 25/05/2020 18:52 hanasaki at gmail.com <hanasaki at gmail.com> wrote:
>
>
> s_client: Option unknown option -trace
> ***
> x509: Unknown parameter text
>
>
> On 5/25/20 11:49 AM, Aki Tuomi wrote:
> > Hi!
> >
>
2020 May 25
2
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
s_client: Option unknown option -trace
***
x509: Unknown parameter text
On 5/25/20 11:49 AM, Aki Tuomi wrote:
> Hi!
>
> Can you do
>
> openssl x509 text -noout </etc/letsencrypt/live/...../fullchain.pem
>
> and check these things:
>
> your server hostname isn included in SubjectAlternativeNames, and that the cert hasn't got MUST-STAPLE attribute? You can see
2011 Mar 24
3
Dovecot 2.0.9: Thunderbird 3.1.9: Very slow while open sent folder with many (4k>) mails
hi,
one customer told us, that he has performance problem in his Thunderbird
3.1.9, while open his sent folder, which has round about 4000 mails in
it, and 20k in his Inbox. For example TB, tries to sync the sent-folder
list (over SSL) from the sent folder for now over 15min.
In the log, I can't see any strange things, so for me, Dovecot works ok.
Maybe, I should use better cache options?
2014 Apr 25
1
Incompatibility Thunderbirds Auth Mech TLS-Certificate <-> Dovecot
Hello,
it seems there there is an issue regarding "TLS-Certtificate"
authentication in Thunderbird and Dovecot. Obviously client certificate
is recognized by Dovecot:
Apr 25 14:29:01 dovecot dovecot: imap-login: Valid certificate:
/emailAddress=christian.felsing at example.net/CN=Christian Felsing
(Test)/OU=CF Certificates/O=example.net/C=DE
AFAIK Dovecot always requires IMAP login,
2020 May 25
0
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
On 2020-05-25 02:54, hanasaki at gmail.com wrote:
> Config has
> ssl_verify_client_cert = no
> What options might have the client auth turned on?
why does gmail attacht empty vcard info ?
without any config snippes its hard to say what config error is local
https://wiki.dovecot.org/SSL/DovecotConfiguration
is it auth_ssl_require_client_cert = yes
i dont use this auth features to