[ext] Invalid certificate

Andre stickybit at myhm.de
So Dez 9 14:32:54 CET 2018


>> mail:info []: pop3-login: Invalid certificate: self signed certificate in certificate chain: /C=SE/O=AddTrust AB/OU=AddTrust External TTP
>> Network/CN=AddTrust External CA Root: user=<user at domain>, method=PLAIN, rip=XXX.XXX.XX.XX, lip=XXX.XXX.XX.XX, TLS, session=<hdNzF3h8iOBybTOb>
> 
> Paar mehr Details? Ist das ein proxy Setup?

Ja, ist Proxy. Weiter unten ist dovecot.conf.

> Was sagt:
> doveconf -n ssl_client_ca_file
erzeugt keine Ausgabe.

dovecot.conf:

listen = XXX.XXX.XX.X

protocols = imap pop3

ssl_cert = </etc/certs/cert.crt
ssl_key = </etc/certs/cert.key
ssl_require_crl = no
ssl_verify_client_cert = no

ssl = required
ssl_protocols = !SSLv2 !SSLv3

passdb {
   driver = sql
   args = /etc/dovecot/dovecot-sql.conf
}

auth_mechanisms = plain login

service auth {
   unix_listener /var/spool/postfix/private/auth {
      mode = 0660
      user = postfix
      group = postfix
   }
}

service imap-login {
   service_count = 0
   process_min_avail = 8
   vsz_limit = 128M
   inet_listener imaps {
      port = 993
   }
}

service pop3-login {
   service_count = 0
   process_min_avail = 8
   vsz_limit = 128M
   inet_listener pop3s {
      port = 995
   }
}

-- 
LG
Andre


Mehr Informationen über die Mailingliste Dovecot