Self-Signed Certificate issue

Darryl Baker darryl.p.baker at
Fri Sep 23 17:07:42 UTC 2016

My apologies if this is a repeat but my search of the archive did not turn
it up in the recent past. If this has been covered just point me at the
previous thread, please.

I am running a small email site which I am moving from uw-imapd and Solaris
to Ubuntu and Dovecot imaps and pop3s. I am trying to use a self-signed
certificate for this site. I am using Thunderbird as the test client. I've
tried both the pre-built snakeoil certificate and building a special one
for dovecot. In /var/log/mail.err I keep getting what I am interpreting as
a missing CA cert. The message is:

dovecot: imap-login: Error: SSL: Stacked error: error:14094418:SSL
routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48

The certificate was created by:

openssl req -new -x509 -days 365 -nodes -out /etc/ssl/certs/dovecot.pem
-keyout /etc/ssl/private/dovecot.pem

The Dovecot version is 2.2.22 (fe789d2) The Ubuntu version is 16.04 LTS
current patches.

*Darryl Baker*

More information about the dovecot mailing list