[Dovecot] SSL with startssl.com certificates

[Reindl Harald]

Am 17.09.2013 15:01, schrieb Dan Langille:
> On 2013-09-17 08:43, Reindl Harald wrote:
>> Am 17.09.2013 14:39, schrieb Dan Langille:
>> On 2013-09-16 20:28, Noel Butler wrote:
>> Since we just ruled this one out, might I suggest you grab the source
>> and build it, install it all under /opt/dovecot  that way it wont
>> interfere with your ports installation and try that, the one you
>> successfully just tested uses dovecot 2.1 not 2.2, so maybe try source
>> of 2.1 and see if it works.
>>
>> I just tried 2.1.16.  The iPhone has no trouble on 143 but on 993, it's just like 2.2
>>
>> But, if it does work on port 143 with TLS I wouldnt worry too much about it
>>
>> tcpdump is showing me raw text going past, so I know I'm not getting TLS on either Dovecot 2.1 or 2.2
>>
>> It seems that TLS is not supported by my client.  Pity.
>>
>> iPhone is the worst mail client on this planet but for sure supports TLS
>>
>> Apple is here the same as Microsoft
>>
>> * remove the account completly
>> * add it again and it will detect that encryption is available
> 
> Done. But tcpdump is still showing me plain text.

and you surely have "ssl = yes" in your configuration?
"dovecot -n" does not show it here too while it is there

*what* says "telnet your-server 143"
if it is configured correctly you see "STARTTLS" in the capabilities
if you do not see it than the problem is a completlöy different one

* OK [CAPABILITY IMAP4 IMAP4rev1 ACL RIGHTS=texk NAMESPACE CHILDREN SORT QUOTA THREAD=ORDEREDSUBJECT UNSELECT IDLE
STARTTLS AUTH=CRAM-MD5 AUTH=DIGEST-MD5 AUTH=LOGIN AUTH=PLAIN AUTH=SCRAM-SHA-1]

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 263 bytes
Desc: OpenPGP digital signature
URL: <http://dovecot.org/pipermail/dovecot/attachments/20130917/78be5a1a/attachment.bin>