Hello, > I am having problems getting Dovecot and SSL to work correctly. > I feel like I am really close but just cant quite get there. > Im running the following: > > Redhat Linux Enterprise Edition version 4 update 3 > openssl version 0.9.8a > Dovecot version 1.0.beta7 > > I have created the certificates and am trying to connect to port 993 > but get the following: > > # openssl s_client -prexit -state -debug -connect localhost:993 > CONNECTED(00000003) > SSL_connect:before/connect initialization > write to 0x80b6490 [0x80b7510] (148 bytes => 148 (0x94)) > 0000 - 80 92 01 03 01 00 69 00-00 00 20 00 00 39 00 > 00 .......i... ..9.. > 0010 - 38 00 00 35 00 00 16 00-00 13 00 00 0a 07 00 c0 > 8..5............ > 0020 - 00 00 33 00 00 32 00 00-2f 00 00 07 05 00 80 > 03 ...3..2../....... > 0030 - 00 80 00 00 66 00 00 05-00 00 04 01 00 80 08 > 00 .....f........... > 0040 - 80 00 00 63 00 00 62 00-00 61 00 00 15 00 00 > 12 ....c..b..a...... > 0050 - 00 00 09 06 00 40 00 00-65 00 00 64 00 00 60 > 00 [EMAIL PROTECTED] > 0060 - 00 14 00 00 11 00 00 08-00 00 06 04 00 80 00 > 00 ................ > 0070 - 03 02 00 80 17 86 59 8b-60 b9 ea d5 4b e7 e7 > a8 ......Y.`...K... > 0080 - 15 b9 75 67 b0 2c a7 3a-6e 93 58 a2 14 d4 8a > e7 ..ug.,.:n.X..... > 0090 - 11 72 38 4e .r8N > SSL_connect:SSLv2/v3 write client hello A > read from 0x80b6490 [0x80bca70] (7 bytes => -1 (0xFFFFFFFF)) > SSL_connect:error in SSLv2/v3 read server hello A This seems to be Dovecot problem. s_client after writing client_hello wants to read server_hello (first 7 bytes of header) but read returns -1. For me this seems like broken network connection or simply Dovecot closed network socket for some reason (for example permission deny for this s_client IP address). You should check Dovecot logs.
Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
