similar to: Problem with Let's Encrypt Certificate

Hey Robert, thanks for your reply. Am 17.02.2017 um 19:28 schrieb Robert L Mathews: > Looking at your dovecot -n, you're using two different files here: > > ssl_cert = </etc/ssl/sebode-online.de/chain.pem > ssl_key = </etc/ssl/sebode-online.de/key.pem > > Are you sure these two files match, and contain the right things in the > right order? > Yes,

Hey. Thanks again for your help. I took the "dovecot -n" while the StartSSL Certificate was active, so the chain.pem was correct. Finally I found the issue! :-) But I still have no idea why the problem happens with Thunderbird. I used dehydrated to fetch the certificates from Let's Encrypt and as I said, it works for most clients pretty well. (Tried: Mulberry, Claws Mail, Outlook

Usually with LE, the filename is fullchain.pem, not chain.pem. Can you please doublecheck this? Also, try openssl s_client -connect hostname:143 -starttls imap Aki > On February 17, 2017 at 10:31 PM Bastian Sebode <b.sebode at linet-services.de> wrote: > > > Hey Robert, > > thanks for your reply. > > Am 17.02.2017 um 19:28 schrieb Robert L Mathews: > >

Seems wrong to me too, Robert. If you put your private key inside your certificate, won't it be sent to the client along with it ? Bastian, are you using an old version of thunderbird ? googling for "SSL alert number 42" gave me two results indicating a bug in thunderbird versions 31,32 and 33. You can check these links if you wish : *

On 2/17/17 8:58 AM, Bastian Sebode wrote: > I uploaded two Wireshark tracefiles, further logs and dovecot -n Looking at your dovecot -n, you're using two different files here: ssl_cert = </etc/ssl/sebode-online.de/chain.pem ssl_key = </etc/ssl/sebode-online.de/key.pem Are you sure these two files match, and contain the right things in the right order? We use a single PEM file as

Hello, I had the same problem. LE is not in the CA list. Best Regards, On 17.02.2017 17:58, Bastian Sebode wrote: > Hello Folks, > > my StartCom SSL-Certificate expires soon and so I wanted to switch to > Let's Encrypt Certificates instead. Unfortunatelly Thunderbird seems not > to like it, although all -tested- other Clients work without any problems. > > When I

Hello Basti. Maybe you tried LE too early when it was not universally accepted as a trusted CA ? On Monday, February 20, 2017 2:22 PM, basti <basti at unix-solution.de> wrote: Hello, I had the same problem. LE is not in the CA list. Best Regards, On 17.02.2017 17:58, Bastian Sebode wrote: > Hello Folks, > > my StartCom SSL-Certificate expires soon and so I wanted to

hi we are using dovecot version 2.2.7 (config file given below) centos 6, qmail, vpopmail, mysql server configuration hex core processor, 16 gb ram 1 X 600 gb 15 k rpm for main drive and 2 X 2000 gb hdd for data (No raid) busy server with around 4000 email ids --- load is around 2 to 10 the issue is that SQUIRRELMAIL webmail users suddenly lose connection while they are working on the webmail.

Hey, I''ve installed Xen 3.0 on a freshly installed Debian Sarge. dom0 is working nicely (kernel 2.6.12.6-xen0). Then I created a domU, again with Debian Sarge, booting Xen''s vmlinuz-2.6.12-xenU. Unfortunately ctrl-c does not work in the domU''s console, neither if I create the domU with "xm create -c ..." nor if I attach to it later. It doesn''t matter

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I'm using SuSE 9.1 on a client system that is part of a NT4 domain. After installing the original samba and smaba-winbind (3.0.2a) packets from the SuSE discs I could use pam_winbind to authenticate against the NT PDC. However, the network browse functionality in kde's konqueror did not work. I used the SuSE online update function to

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I''m trying to setup a central IPSEC-Gateway with several ipsec tunnels. Some are to be routed over one leased line, some over the other leased line. Both leased lines have their own public ip adress. The setup looks kinda like this: eth1(ipsec0)--ISP0--Internet--eth1-Linux1-eth0--Subnet1 /

On 3/15/16 10:13 AM, Sven Hartge wrote: > I don't have a script, but I can provide some numbers. I did a test with > a server for about 10.000 users and 2TB worth of mail, converting from > Maildir++ to mdbox with zlib (level = 6) and had a final size of 1TB, so > 2:1 reduction. These numbers roughly match my results. About 6 TB of mail compresses down to about 3 TB. The

Nicol?s Gudi?o <asternic@gmail.com> wrote: >>> Paul, 1.0.5 stable suffers from caller id issues as well, at least for >>> SIP channels. What fixed things for me was swapping in app_dial.c from >>> 1.0.2 stable (didn't try others). You could also just diff app_dial.c >>> between versions to find the problem but I took the lazy way out the >>>

On 12/14/18 3:34 PM, @lbutlr wrote: > Now that I think about it, even better would be a way to move the messages into an archive box when they are downloaded, this way they will be entirely invisible from the POP3 access, and I can use normal expiry functions to clean out that archive after backup. We do exactly this using the "Lazy Expunge" plugin:

https://bugzilla.mindrot.org/show_bug.cgi?id=2229 Bug ID: 2229 Summary: ssh adds and offers private key twice in certain constellations Product: Portable OpenSSH Version: 6.6p1 Hardware: Other OS: Linux Status: NEW Severity: minor Priority: P5 Component: ssh

RFC 5229 gives the following example: if address :matches ["To", "Cc"] ["coyote@**.com", "wile@**.com"] { # ${0} is the matching address # ${1} is always the empty string # ${2} is part of the domain name ("ACME.Example") fileinto "INBOX.business.${2}"; stop; And I do not understand

I have tried with this sieve config: imapsieve_mailbox1_name = Sent imapsieve_mailbox1_causes = COPY APPEND imapsieve_mailbox1_after = file:/etc/dovecot/sieve/sent.sieve and this sieve file (sent.sieve): discard; This should clearly cause the mail to be deleted right? But whats happen, is that the mail is not deleted, its just marked for deletion (gets a strike-through in Microsoft

> On Mar 21, 2018, at 5:16 PM, Stephan Bosch <stephan at rename-it.nl> wrote: > > Those knobs depend a on your config. If there is truly some resource > limit causing this, it could be the vsz_limit of the (parent) process > invoking your program. Which service is doing that depends on your > config, either LMTP, the script service (when you're using socket >

I've noticed that maildir IMAP COPY commands can generate invalid dovecot.index entries when all seven of the following are true: - The zlib plugin is enabled; - The zlib_save/zlib_save_level options are NOT enabled; - The source message being copied is compressed; - The mail_log plugin is logging "copy" events; - The mail_log_fields setting includes at least one message header; -

I have an X100p card....and it is hard to hear the person on the other end. Should I mess with these values? I have heard both yes and no to this question in the past. If yes, how much louder should I make them? Thanks, MIchael