Re: error 42 ssl certificate expired

2021-04-12 Thread Heiko Schlittermann
gmail (Di 13 Apr 2021 06:16:38 CEST): > Hi, > > I got news: dovecot is the one that is broken, i got setup all other stuff > updated to latest BUT not dovecot, and i got working system. Are you referring to the original topic of this thread? Or is this a new issue? I'm asking, because your addr

Re: error 42 ssl certificate expired

2021-04-12 Thread Aki Tuomi
To me it seems you are serving a valid cert, i checked with openssl s_client -connect host:443 -servername domain Not sure why you have all those local_name blocks there when the cert you are offering covers all your names already. Aki > On 13/04/2021 07:59 gmail wrote: > > > I got forcibl

Re: error 42 ssl certificate expired

2021-04-12 Thread gmail
I got forcibly renewed my certs. dovecot -nP: # 2.3.7.2 (3c910f64b): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.7.2 () # OS: Linux 5.9.0-rc5-lja-tv+ x86_64 Ubuntu 20.04.2 LTS # Hostname: superman.sillywalk.org auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth

Re: error 42 ssl certificate expired

2021-04-12 Thread Aki Tuomi
Uh. You are practically proposing that all versions after 2.3.7.2 would be serving expired SSL certs, due to some bug? It that was the case, then I would believe we would've been inundated with bug reports for the past year or so. Installation probably breaks because you are using expired cert,

Re: error 42 ssl certificate expired

2021-04-12 Thread gmail
Hi, I got news: dovecot is the one that is broken, i got setup all other stuff updated to latest BUT not dovecot, and i got working system. if I upgrade dovecot, the installation breaks. I'm using letencrypt's certs. The version that is good is 2.3.7.2 (3c910f64b) Heiko Schlittermann kirj

Re: error 42 ssl certificate expired

2021-04-12 Thread Heiko Schlittermann
Hi, > In our case this is an internally used Dovecot Mail server that's used for … > certificates worth the expense? Just curious on what everyone's opinion is > of Digital Certs signed by certificate authorities that are only used inside > the LAN. Thoughts? Aki is right. On the long run it's ea

Re: error 42 ssl certificate expired

2021-04-12 Thread Christopher Wensink
I confirm that the solution in Thunderbird, was they had to click on the account's inbox, then click get messages, then click the confirm security exception button on the server identity pop-up, and that fixes the issue.  I could see that under Tools > Options > Certificates for the server sect

Re: error 42 ssl certificate expired

2021-04-12 Thread Aki Tuomi
> On 12/04/2021 17:13 Christopher Wensink > wrote: > > > Dovecot Team, > > I need a little help.  I came in this morning and it seems like the SSL > Certificates expired for dovecot (on an internal mail server) and nobody > can move email into  their folders on this server.  In Thunderbir

error 42 ssl certificate expired

2021-04-12 Thread Christopher Wensink
Dovecot Team, I need a little help.  I came in this morning and it seems like the SSL Certificates expired for dovecot (on an internal mail server) and nobody can move email into  their folders on this server.  In Thunderbird they just see in the status bar:  HISTORY: checking mail server capa