Re: [SM-imapproxy] imapproxy using STARTTLS with Let's Encrypt certificate

[Paul L. <pa...@sq...>]

On Sun, September 4, 2016 10:41 am, c....@we... wrote:
> Hello!
>
> I want to user imapproxy and STARTTLS with Let's Encrypt certificate.
>
> Imapproxy is running on the mailserver. (This mailserver provides
> webserver, too.)
>
> I can connect from a Webmail Client to the mailserver using STARTTLS and
> port 143 w/o issues if imapproxy is stopped.
> If imapproxy is started, I can only connect to mailserver when security
> disenabled.
>
> imapproxy is listening on port 32143, and the relevant port in the
> firewall is open.
>
> When I test the configuration using STARTTLS, I get this error message:
> STARTTLS is not supported.

That string isn't in imapproxy source code.

Also, you should state what version you are using (STARTTLS code was fixed
in 1.2.8-SVN)

> There's nothing written to /var/log/imapproxy_protocol.log

Maybe you aren't talking to imapproxy at all?

> Any advice?
>
> This is my configuration:
> ## imapproxy.conf
> ##
> ## This is the global configuration file for imapproxy.
> ## Lines beginning with a '#' sign are treated as comments and will be
> ## ignored.  Each line to be processed must be a space delimited
> ## keyword/value pair.
> ##
>
> server_hostname localhost
>
> connect_retries 10
> connect_delay 5
>
> cache_size 3072
>
> listen_port 32143
>
> server_port 143
>
> cache_expiration_time 300
>
> proc_username nobody
> proc_groupname nogroup
>
> stat_filename /var/run/pimpstats
>
> protocol_log_filename /var/log/imapproxy_protocol.log
>
> syslog_facility LOG_MAIL
>
> #syslog_prioritymask LOG_WARNING
>
> send_tcp_keepalives no
>
> enable_select_cache no
>
> foreground_mode no
>
> force_tls no
>
> #chroot_directory /var/lib/imapproxy/chroot
>
> enable_admin_commands no
>
> tls_ca_path /var/lib/imapproxy/chroot/
> tls_ca_file /var/lib/imapproxy/chroot/mehl.biszumbitterenen.de.pem
> tls_cert_file /var/lib/imapproxy/chroot/cert.pem
> tls_key_file /var/lib/imapproxy/chroot/privkey.pem