Excellent, thank you again.

The openssl command I have tried (that used to work with Dovecot 2.2) is:
openssl s_client -connect mail.privustech.com:143
I have also tried
        openssl s_client -connect mail.privustech.com:143 -servername mail.privustech.com
I've posted the full output from this to https://pastebin.com/eUSarQdx

I've posted te full output from dovecot -n to https://pastebin.com/F8RaC4bt

Thank you again, Andy

On Sat, 2018-12-15 at 17:27 +0100, Alexander Dalloz wrote:
Am 15.12.2018 um 17:16 schrieb C. Andrews Lavarre:
to /etc/apparmor.d/local/usr.lib.dovecot.imap-login but still cannot login with either the mail client or with explicit openssl: it complains error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:794:
Hi, that error above typically means to connect with SSL to STARTTLS or vice versa. Please provide the complete command you issue using "openssl s_client" together with the corresponding dovecot logging. As well the output of "doveconf -n" would be useful to help you further. Alexander