Re: [Dovecot] No CA names sent in TLS handshake

2007-04-03 Thread Johnny Chadda
Timo Sirainen wrote: On Tue, 2007-04-03 at 11:50 +0200, Johnny Chadda wrote: Timo Sirainen wrote: Well, I'm not that big of an OpenSSL guru, but googling shows that with other software it's often a certificate configuration problem. Did you set ssl_ca_file and does the file contain a valid CA

Re: [Dovecot] No CA names sent in TLS handshake

2007-04-03 Thread Timo Sirainen
On Tue, 2007-04-03 at 11:50 +0200, Johnny Chadda wrote: > Timo Sirainen wrote: > > Well, I'm not that big of an OpenSSL guru, but googling shows that with > > other software it's often a certificate configuration problem. > > > > Did you set ssl_ca_file and does the file contain a valid CA and CRL

Re: [Dovecot] No CA names sent in TLS handshake

2007-04-03 Thread Johnny Chadda
Timo Sirainen wrote: Well, I'm not that big of an OpenSSL guru, but googling shows that with other software it's often a certificate configuration problem. Did you set ssl_ca_file and does the file contain a valid CA and CRL? Yes, the certificates are Ok. It works if I explicitly select which

Re: [Dovecot] No CA names sent in TLS handshake

2007-04-03 Thread Timo Sirainen
On Tue, 2007-04-03 at 09:47 +0200, Johnny Chadda wrote: > Hello, > > I'm setting up Dovecot with client certificates and everything is > working fine as long as the client only has one certificate in his > store. If he has more than one, the wrong one might be sent to the server. > > The root o