OK I found the error, the error is definitely something on our side of the port 
and not because of roundcube/dovecot

When I turn peer verification off, roundcube is continues and establishes 
connection.
I think that the reason for this is that roundcube needs to access the CA cert 
files which are not inside the chroot /var/www/

I fixed the issue by copying the /etc/ssl/cert.pem file into the chroot 
location and pointing the ca-cert config options to the proper place

I really think this should be added to the README of the port.

I can send a diff later but hopefully the maintainer can just add a small note?

Aisha


On 7/8/20 8:57 PM, Aisha Tammy wrote:
> I'm trying to get roundcube setup on my server and everytime I try to connect 
> to dovecot, it gives a weird error on roundcubes side, in errors.log:
> 
> [08-Jul-2020 21:34:18 +0000]: <6q9plqno> IMAP Error: Login failed for 
> ai...@aisha.cc against imap.aisha.cc from 10.7.0.1(X-Forwarded-For: 
> 98.109.25.191). Could
> not connect to ssl://imap.aisha.cc:993: Unknown reason in 
> /roundcubemail/program/lib/Roundcube/rcube_imap.php on line 200 (POST 
> /?_task=login&_action=login)
> 
> On the interface I get:
>  Connection to storage server failed
> 
> On dovecots side, I get:
> Jul  8 20:28:59 mail dovecot: imap-login: Disconnected (no auth attempts in 0 
> secs): user=<>, rip=98.109.25.191, lip=108.61.81.40, TLS handshaking: 
> SSL_accept()
>  failed: error:14037418:SSL routines:ACCEPT_SR_KEY_EXCH:tlsv1 alert unknown 
> ca: SSL alert number 48, session=<teKGT/epjA9ibRm/>
> 
> I think this might be some error with either ssl lib things in php or 
> something similar.
> (An unlikelier scenario is that I have some errors with my dovecot imap ssl, 
> but every other client, thunderbird/fairmail/k-9 mail are authenticating fine)
> 
> 
> Would love to get this fixed :(
> 
> Thanks
> Aisha
> 

Reply via email to