Re: [Dovecot] Trying to explain mutt+dovecot(ssl) to myself :(

2007-04-23 Thread Johnny Chadda
Wilkinson, Alex wrote: > So I started to write about it and am stuck. Can those that > _understand_ mutt+ssl have a read of what I wrote to myself and > give me your $00.02 worth (corrections etc). Just connect to your IMAP server using openssl. openssl s_client -connect mailserver:993 (opti

Re: [Dovecot] Client with SSL client cert support?

2007-04-20 Thread Johnny Chadda
Peter Abrahamsen wrote: > I've gleaned that dovecot has support for verifying SSL client certs on > connect. What IMAP clients have people found that support sending a > specific SSL cert? I can't find this feature in Thunderbird, at least. (sorry, I accidentally sent it directly to Peter) You can

Re: [Dovecot] v1.0.0 released

2007-04-13 Thread Johnny Chadda
Timo Sirainen wrote: > It took almost 5 years, but it's finally ready. I'm not expecting to > release v1.0.1 anytime soon, unless someone's been sitting on a major > bug just waiting for v1.0 to be released. :) Congratulations! You have done a wonderful job. Johnny

Re: [Dovecot] 1.0.rc30 released

2007-04-06 Thread Johnny Chadda
Timo Sirainen wrote: + Send list of CA names to client when using ssl_verify_client_cert=yes. This is wonderful news! Thank you for implementing this so quickly into the official distribution.

Re: [Dovecot] No CA names sent in TLS handshake

2007-04-03 Thread Johnny Chadda
Timo Sirainen wrote: On Tue, 2007-04-03 at 11:50 +0200, Johnny Chadda wrote: Timo Sirainen wrote: Well, I'm not that big of an OpenSSL guru, but googling shows that with other software it's often a certificate configuration problem. Did you set ssl_ca_file and does the file contain

Re: [Dovecot] No CA names sent in TLS handshake

2007-04-03 Thread Johnny Chadda
Timo Sirainen wrote: Well, I'm not that big of an OpenSSL guru, but googling shows that with other software it's often a certificate configuration problem. Did you set ssl_ca_file and does the file contain a valid CA and CRL? Yes, the certificates are Ok. It works if I explicitly select which

[Dovecot] No CA names sent in TLS handshake

2007-04-03 Thread Johnny Chadda
Hello, I'm setting up Dovecot with client certificates and everything is working fine as long as the client only has one certificate in his store. If he has more than one, the wrong one might be sent to the server. The root of the problem is that Dovecot does not send out a list of valid CA