Re: [Courier-imap] Problem about "not support the selected authentication method" after version upgrade from 4.18.2 to 5.0.

[Sam V. <mr...@co...>]

Sam Varshavchik writes:

> [mrsam@octopus imap]$ telnet imap.epopen.com 143
> Trying 122.117.86.253…
> Connected to imap.epopen.com.
> Escape character is '^]'.
> * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT  
> THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS LOGINDISABLED  
> ENABLE UTF8=ACCEPT] Courier-IMAP ready. Copyright 1998-2018 Double  
> Precision, Inc.  See COPYING for distribution information.
> a starttls
> a OK Begin SSL/TLS negotiation now.
> a NO STARTTLS failed: ip=[::ffff:68.166.206.86], couriertls:  
> /usr/local/etc/courier-imap/certificate/epopen.com/fullchain- 
> privkey_combined.pem: erro
> * NO Error in IMAP command received by server.
>
> The full error message is too long, and it gets cut off.
>
> Inspect this certificate file and check that the actual file's permissions  
> and ownership are correct.

The certificate file must be owned by the non-privileged system userid that  
Courier is configured to use. Run "courierauthconfig --configfiles", and  
chown the certificate file to the shown mailuser:mailgroup.