From: David H. <dhi...@hi...> - 2015-02-25 23:21:33
|
"=?utf-8?B?IlTDs3RoIEF0dGlsYSI=?= wrote:" > > The error message speaks for itself. Check dovecot's ssl configuration > settings. Especially ssl_cipher_list in conf.d/10-ssl.conf The file has no list defined, just these comments. # SSL ciphers to use # #ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL Looks like SSLv2 is disabled. What does squirrelmail need? > http://wiki2.dovecot.org/SSL/DovecotConfiguration > -- > dr Tóth Attila, Radiológus, 06-20-825-8057 > Attila Toth MD, Radiologist, +36-20-825-8057 > > 2015.Február 24.(K) 05:59 idÅpontban David Highley ezt Ãrta: > > "David Highley wrote:" > >> > >> "Paul Lesniewski wrote:" > >> > > >> > On Sunday, February 22, 2015, David Highley < > >> > dhi...@hi...> wrote: > >> > > >> > > Description of the setup; remote access for email via web server > >> with > >> > > squirrelmail and dovecot. Configured to use imap port 993 and smtp > >> tls. > >> > > Email resides on another internal email server. This has been > >> working > >> > > for many years and was working on fedora 20. After new install of > >> web > >> > > server to fedora 21 and an update to the email server to fedora 21 > >> the > >> > > roaming email access has been broken; Error connecting to IMAP > >> server: > >> > > tls://mail. 0 : > >> > > >> > > >> > It appears to be trying to connect to a hostname without the rest of > >> your > >> > domain. This corresponds to your IMAP server address of just 'mail' > >> > >> That was a mistake, but should have worked anyway with the host alias in > >> the host file. > >> > >> We installed thunderbird to help with testing and have made some > >> progress. We are able to use 993 imap access for reading email and > >> modified the web server so it can send email after we found that the > >> email server rejects any type of relaying. Bit confused as to how this > >> appeared to work in the past. > >> > >> So we changed the config_local.php file not to use imap_tls or smtp_tls > >> and now we see a very long conncecting followed by the error message: > >> ERROR: Connection dropped by IMAP server. > >> > >> We have checked the journalctl logs on both hosts and neither log > >> anything. We do see the web ssl access and request. > > > > We are still learning how to find information with journalctl. We see > > the error below and have tried several different things that seemed to > > fix this issue for others but so far we are not able to make this work. > > > > The error: > > dovecot[1857]: imap-login: Disconnected (no auth attempts in 60 secs): > > user=<>, rip=10.2.2.3, lip=10.2.2.7, TLS handshaking: SSL_accept() > > failed: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown > > protocol, session=<yhak9c0PTwAKAgID> > > > > Since we are using 993 with thunderbird which also uses dovecot why > > would it not work for squirrelmail? > > > >> > >> > > >> > > >> > > >> > -- > >> > Paul Lesniewski > >> > SquirrelMail Team > >> > Please support Open Source Software by donating to SquirrelMail! > >> > http://squirrelmail.org/donate_paul_lesniewski.php > >> > ------------------------------------------------------------------------------ > >> > Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server > >> > from Actuate! Instantly Supercharge Your Business Reports and > >> Dashboards > >> > with Interactivity, Sharing, Native Excel Exports, App Integration & > >> more > >> > Get technology previously reserved for billion-dollar corporations, > >> FREE > >> > http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk > >> > ----- > >> > squirrelmail-users mailing list > >> > Posting guidelines: http://squirrelmail.org/postingguidelines > >> > List address: squ...@li... > >> > List archives: http://news.gmane.org/gmane.mail.squirrelmail.user > >> > List info (subscribe/unsubscribe/change options): > >> https://lists.sourceforge.net/lists/listinfo/squirrelmail-users > >> > > >> > >> > >> > >> ------------------------------------------------------------------------------ > >> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server > >> from Actuate! Instantly Supercharge Your Business Reports and Dashboards > >> with Interactivity, Sharing, Native Excel Exports, App Integration & > >> more > >> Get technology previously reserved for billion-dollar corporations, FREE > >> http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk > >> ----- > >> squirrelmail-users mailing list > >> Posting guidelines: http://squirrelmail.org/postingguidelines > >> List address: squ...@li... > >> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user > >> List info (subscribe/unsubscribe/change options): > >> https://lists.sourceforge.net/lists/listinfo/squirrelmail-users > >> > > > > ------------------------------------------------------------------------------ > > Dive into the World of Parallel Programming The Go Parallel Website, > > sponsored > > by Intel and developed in partnership with Slashdot Media, is your hub for > > all > > things parallel software development, from weekly thought leadership blogs > > to > > news, videos, case studies, tutorials and more. Take a look and join the > > conversation now. http://goparallel.sourceforge.net/ > > ----- > > squirrelmail-users mailing list > > Posting guidelines: http://squirrelmail.org/postingguidelines > > List address: squ...@li... > > List archives: http://news.gmane.org/gmane.mail.squirrelmail.user > > List info (subscribe/unsubscribe/change options): > > https://lists.sourceforge.net/lists/listinfo/squirrelmail-users > > > > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > ----- > squirrelmail-users mailing list > Posting guidelines: http://squirrelmail.org/postingguidelines > List address: squ...@li... > List archives: http://news.gmane.org/gmane.mail.squirrelmail.user > List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users > |