-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Christian,
Am 25.07.2014 um 14:19 schrieb Christian Mack: > Hello Rasca Gmelch > > Am 2014-07-23 14:38, schrieb Rasca Gmelch: >> >> sogo is installed under debian 7. I put the intermediate cert to >> /etc/ssl/certs and checked that also the toplevel CA cert is >> included in /etc/ssl/certs/. And did a "c_rehash". >> > > On Debian and Ubuntu systems you should use update-ca-certificates > (packages ca-certificates). IIRC there are 2 different hashing > algorithms used nowaday. update-ca-certificates will pick both or > the correct one for your system. > > I don't know if that fixes your problem though. Thank you for these notes. But I think using the c_rehash command should also be fine, because it creates two hash links for every certificate. > >> But it didn't help. It looks like debuging SSL in sogo is nearly >> imposibble. No usefull messages in the logfiles - I had the same >> bad experiance with openldap. >> > > What does your sieve server say on this STARTTLS sessions? I see in the sogo logfile: Mar 28 15:00:21 sogod [12226]: <0x0x7f0d49d18fa0[NGSieveClient]> TLS started successfully. On the cyrus server logfile I see: cyrus/sieve[26762]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication Regards, Rasca - -- Rasca Gmelch | IT | JabberID: [email protected] OpenPGP Key ID: 8168E925, Key server: pool.sks-keyservers.net Fingerprint 1FD0 3199 13B7 7ADC 5DF1 A8EF FA4C 4AC0 8168 E925 ART+COM AG | Kleiststr. 23-26 | 10787 Berlin | Germany Fon: +49.30.21001-466 | Fax: +49.30.21001-555 http://www.artcom.de/ HRB 68308 | Amtsgericht Charlottenburg Vorstand: Andreas Wiek, Prof. Joachim Sauter Aufsichtsratsvorsitzender: Volker Tietgens USt-IdNr.: DE811998328 -----BEGIN PGP SIGNATURE----- iQIcBAEBAgAGBQJT0laxAAoJEPpMSsCBaOklcsAQAJH69PrEF6NTWSByAxkt9/F0 WvfgBVaT8ys0qBz/PiaD/SGNu2PQBT74M1QDkrhamP4yg9lRP9GF1lAP2BUy7XVq ojZvYNQweuKcwZ965ZF9+4Ir4uTMIHQUicQDwi6BwQN25ZGiR8uLXTexKtC7ZMCz RLsq7UJ/ingvuE4wjfpZrSbpIpQueRmB/olNv6OTNQEh8JIg5AsZLe132CWC7z/5 qSjuv+jusmS6rBOOgu3gnn44yiDc9md8O80lO0vSr24chJPqWnFp5KWN/P+0/s6M bhPrBe9UShyeehWtE/cKFWUI5omXV3HnS6YRNo6AZ1MSSgyPYpctqBYo+r0+xKiY 7IT3mLzhPOoWtMm6y6rpKNq3IwM/Q1/PWylP4nsSTkgc8Qz13uEGL/T/Fm/hebNl 6Mytkli9Ds8IFNhCCE8NZzFZqOJ8ZfY6Dnztqr7+8sHAA4/XbpSSOz4dTOqldI+d snOxccyYCzDeLpP4wJvDxfxQVDHX0em95VTX11j3dQ39I290r5DNOdweb4Q/ixN6 YB6wAd6zMgPM1bTWBMuKiTofx+71QszzwM6MOsdwNlzcGViYAoHl1oac3TPrt4LN 94KGG+yWdKtF02zTTI/F9to1VQW6AsHrNCDSoZ9Ayddk0O0blF+u45aN68Z6BvES zJeXRy1lHUvdmPygAE8x =PnxT -----END PGP SIGNATURE----- -- [email protected] https://inverse.ca/sogo/lists
