[Dovecot] SSL with startssl.com certificates

[Dan Langille]

On 2013-09-16 20:28, Noel Butler wrote:
> On Mon, 2013-09-16 at 10:10 -0400, Dan Langille wrote:
> 
> On Sep 14, 2013, at 10:36 PM, Noel Butler wrote:
> 
> > On Sat, 2013-09-14 at 15:21 -0400, Dan Langille wrote:
> >
> >
> >>>
> >>
> >> Hmmm, I tried ssl = yes.  Mail.app still crashes when trying to connect.
> >>
> >
> >
> > Well, its likely an Apple fault, after all their implementation of pop3
> > has been known to be broken for many many many years, but still after
> > all these years are incapable of finding a developer to fix it by
> > inserting a QUIT after its done everything.
> >
> 
> 
> 
> Since we just ruled this one out, might I suggest you grab the source
> and build it, install it all under /opt/dovecot  that way it wont
> interfere with your ports installation and try that, the one you
> successfully just tested uses dovecot 2.1 not 2.2, so maybe try source
> of 2.1 and see if it works.

I just tried 2.1.16.  The iPhone has no trouble on 143 but on 993, it's 
just like 2.2

> But, if it does work on port 143 with TLS I wouldnt worry too much 
> about it

tcpdump is showing me raw text going past, so I know I'm not getting TLS 
on either Dovecot 2.1 or 2.2

It seems that TLS is not supported by my client.  Pity.

I thank you for your help though.  We have a workaround, which is good 
enough for my particular
situation: self-signed certificates.  However, that solution is not 
ideal for most people.  It is
for that reason that I'm willing to keep hacking at this if others have 
further ideas / suggestions.

-- 
Dan Langille - http://langille.org/