Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-26 Thread hanas...@gmail.com
Inline below On 5/25/20 11:55 AM, Aki Tuomi wrote: Sorry... openssl x509 -text -noout -in /etc/letsencrypt/live/./fullchain.pem subject=CN = fullHostnameWith.com on the end MUST-STAPLE <= not present nor 1.3.6 and openssl s_client -connect host:993 SSL-Session: Protocol : TLSv

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-25 Thread Aki Tuomi
Sorry... openssl x509 -text -noout -in /etc/letsencrypt/live/./fullchain.pem and openssl s_client -connect host:993 Aki > On 25/05/2020 18:52 hanas...@gmail.com wrote: > > > s_client: Option unknown option -trace > *** > x509: Unknown parameter text > > > On 5/25/20 11:49 AM, Aki Tuo

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-25 Thread hanas...@gmail.com
s_client: Option unknown option -trace *** x509: Unknown parameter text On 5/25/20 11:49 AM, Aki Tuomi wrote: Hi! Can you do openssl x509 text -noout On 25/05/2020 18:46 hanas...@gmail.com wrote: Hello Aki and all, The below lines are in the dovecot config file. This seems to be the

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-25 Thread Aki Tuomi
Hi! Can you do openssl x509 text -noout On 25/05/2020 18:46 hanas...@gmail.com wrote: > > > Hello Aki and all, > > The below lines are in the dovecot config file. This seems to be the > same as Aki's suggestion. correct? I have also double checked file > perms, tried with several new k

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-25 Thread hanas...@gmail.com
Hello Aki and all, The below lines are in the dovecot config file. This seems to be the same as Aki's suggestion. correct? I have also double checked file perms, tried with several new key gens, several versions of thunderbird and created completely new thunderbird profiles. Thank you, s

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-25 Thread Aki Tuomi
The real reason is that you have misconfigured your cert. Alert 42 means that the *client* consider *server* client untrusted. If you are using LE cert you should configure ssl_cert= On 25/05/2020 18:01 Hanasaki Jiji wrote: > > > From the config : auth_ssl_require_client_cert = no > GMail em

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-25 Thread Hanasaki Jiji
>From the config : auth_ssl_require_client_cert = no GMail empty vcard ... I have no ideas . so sorry. Coding snippets. What can I provide for you that will help? NOTE: it is pretty much the default config from Debian. Thank you, On Sun, May 24, 2020 at 9:29 PM Benny Pedersen wrote: > > On 2

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-24 Thread Benny Pedersen
On 2020-05-25 02:54, hanas...@gmail.com wrote: Config has ssl_verify_client_cert = no What options might have the client auth turned on? why does gmail attacht empty vcard info ? without any config snippes its hard to say what config error is local https://wiki.dovecot.org/SSL/Dovecot

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-24 Thread hanas...@gmail.com
Config has ssl_verify_client_cert = no What options might have the client auth turned on? TYIA On 5/24/20 6:40 PM, Felipe Gasper wrote: From what I can tell, “SSL alert number 42” means that you’ve configured Dovecot to require client authentication. Otherwise, your Let’s Encrypt cer

Re: How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-24 Thread Felipe Gasper
From what I can tell, “SSL alert number 42” means that you’ve configured Dovecot to require client authentication. Otherwise, your Let’s Encrypt certificate (with its authority chain) should suffice. -FG > On May 24, 2020, at 5:45 PM, hanas...@gmail.com wrote: > > Hello all, > > What are the

How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

2020-05-24 Thread hanas...@gmail.com
Hello all, What are the instructions for making an SSL cert for Dovecot IMAPS? Two methods have been tried, and work, with Evolution; however generate the following error when Thunderbird tries to connect. Thank you, method 1 : self signed openssl req -newkey rsa:4096 -sha512 -x509 -days 365