Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Noel Butler
On 10/10/2013 13:36, Noel Butler wrote: I can't recall if we previously discussed it, but, why the fascination with imaps, why not use TLS on 143, or wont that connect either? tried pop3 TLS ? pop3s? and when you test, use -CAfile /path/to/(startssl's)CA.pem I see no auth mech statement, so usi

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Noel Butler
I can't recall if we previously discussed it, but, why the fascination with imaps, why not use TLS on 143, or wont that connect either? tried pop3 TLS ? pop3s? and when you test, use -CAfile /path/to/(startssl's)CA.pem I see no auth mech statement, so using hte default is limited, IIRC, login

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Dan Langille
On Oct 9, 2013, at 6:33 PM, Noel Butler wrote: > On 10/10/2013 06:09, Eliezer Croitoru wrote: > >> I would imaging that 4k bits certificate handshake and validation can >> take more then 1 sec.. >> Am I right about it? > > hardly > > and the size is not his problem. > > he was given a test acc

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Noel Butler
On 10/10/2013 06:09, Eliezer Croitoru wrote: I would imaging that 4k bits certificate handshake and validation can take more then 1 sec.. Am I right about it? hardly and the size is not his problem. he was given a test account on my network when I last saw this thread (few weeks back?), th

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Reindl Harald
Am 09.10.2013 23:09, schrieb Eliezer Croitoru: > On 10/09/2013 11:15 PM, Reindl Harald wrote: >> why in the world should it take more than 1 second? >> and even if - how does this matter? > The dovecot daemon waited only 1 second for responnse.. says who? the *client* closed the connection with

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Eliezer Croitoru
On 10/09/2013 11:15 PM, Reindl Harald wrote: why in the world should it take more than 1 second? and even if - how does this matter? The dovecot daemon waited only 1 second for responnse.. and if there is a 900 Mhz client like many devices that uses android how long it would take to encypt end

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Reindl Harald
Am 09.10.2013 22:09, schrieb Eliezer Croitoru: > On 10/09/2013 10:55 PM, Reindl Harald wrote: >> >> >> Am 09.10.2013 21:45, schrieb Eliezer Croitoru: >>> On 10/09/2013 10:31 PM, Reindl Harald wrote: Am 09.10.2013 21:27, schrieb Eliezer Croitoru: > On 09/13/2013 02:59 PM, Dan Lang

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Eliezer Croitoru
On 10/09/2013 10:55 PM, Reindl Harald wrote: Am 09.10.2013 21:45, schrieb Eliezer Croitoru: On 10/09/2013 10:31 PM, Reindl Harald wrote: Am 09.10.2013 21:27, schrieb Eliezer Croitoru: On 09/13/2013 02:59 PM, Dan Langille wrote: *** /var/log/maillog *** Sep 13 11:50:46 imaps dovecot: imap

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Reindl Harald
Am 09.10.2013 21:45, schrieb Eliezer Croitoru: > On 10/09/2013 10:31 PM, Reindl Harald wrote: >> >> >> Am 09.10.2013 21:27, schrieb Eliezer Croitoru: >>> On 09/13/2013 02:59 PM, Dan Langille wrote: *** /var/log/maillog *** Sep 13 11:50:46 imaps dovecot: imap-login: Warning: SSL fai

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Eliezer Croitoru
On 10/09/2013 10:31 PM, Reindl Harald wrote: Am 09.10.2013 21:27, schrieb Eliezer Croitoru: On 09/13/2013 02:59 PM, Dan Langille wrote: *** /var/log/maillog *** Sep 13 11:50:46 imaps dovecot: imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [166.137.84.11] Sep 1

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Reindl Harald
Am 09.10.2013 21:27, schrieb Eliezer Croitoru: > On 09/13/2013 02:59 PM, Dan Langille wrote: >> >> *** /var/log/maillog *** >> Sep 13 11:50:46 imaps dovecot: imap-login: Warning: SSL failed: >> where=0x2002: SSLv3 read client certificate A [166.137.84.11] >> Sep 13 11:50:46 imaps dovecot: imap-lo

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Eliezer Croitoru
On 09/13/2013 02:59 PM, Dan Langille wrote: *** /var/log/maillog *** Sep 13 11:50:46 imaps dovecot: imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [166.137.84.11] Sep 13 11:50:46 imaps dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=16

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Reindl Harald
Am 09.10.2013 21:06, schrieb Dan Langille: > On Oct 6, 2013, at 5:06 PM, Reindl Harald wrote: >> and mail.app is working even with *self signed* certificates and dovecot 2.2 >> you only have to accept / import the certificate >> proven by a testserver all day long > > It seems that the test serve

Re: [Dovecot] SSL with startssl.com certificates

2013-10-09 Thread Dan Langille
On Oct 6, 2013, at 5:06 PM, Reindl Harald wrote: > > > Am 06.10.2013 22:42, schrieb Dan Langille: >> I have Thunderbird working just fine on my Macbook. >> >> But my goal is mail.app on my iPhone and my Macbook. When they try to >> connect, the mail server logs are: >> >> Oct 6 20:20:25 ima

Re: [Dovecot] Doveadm with a 2nd Instance

2013-10-09 Thread Chris Lasater
Hey Rob, I figured this one out. The bug is associated with the default run/dovecot base_dir. If you move both instances to a different location then (or at least the one named dovecot) it works fine and I can control both instances properly. Chris On 09/26/2013 09:02 AM, /dev/rob0 wro

Re: [Dovecot] smartsieve managesieve-login failure with dovecot 2.1.7

2013-10-09 Thread Wouter Berkepeis
Hello Simon, Thank you for your explanation about Horde and Ingo. I will certainly try to install it and see if it satisfies my needs. And as you said, installation is done by pear, so a Debian package is not needed. I only wondered why the Horde software is not included anymore in Wheezy, as it w

[Dovecot] dovecot: ssl-params

2013-10-09 Thread Frank Elsner
Hello *, what is the reason for this strange behaviour? May I ignore it? Oct 8 19:32:20 seymour dovecot: ssl-params: Generating SSL parameters Oct 8 19:32:29 seymour dovecot: ssl-params: SSL parameters regeneration completed Oct 9 07:01:05 seymour dovecot: ssl-params: Generating SSL parame