doveadm: SSL handshake failed - wrong version number
When attempting a doveadm backup, e.g. :
doveadm -D backup -Ru user tcp:foo.example.com:12345
I am getting the following error :
Error: SSL handshake failed: SSL_accept() failed: error:0A00010B:SSL routines::wrong version number
There is nothing wrong with my SSL config because, e.g. openssl s_client -connect localhost:993 works on the source host.
So I don't know why doveadm doesn't work.
My SSL config is: ssl = required ssl_cert = </etc/ssl/foo.example.com.pem ssl_key = </etc/ssl/foo.example.com.priv ssl_client_ca_dir = /etc/ssl/certsĀ ssl_min_protocol = TLSv1.2 ssl_prefer_server_ciphers = yes ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305 service doveadm { inet_listener { port = 12345 ssl = yes } }
On 18/07/2024 14:41, Rachel Roch via dovecot wrote:
When attempting a doveadm backup, e.g. :
doveadm -D backup -Ru user tcp:foo.example.com:12345
Hi Rachel
maybe that should be with tcps
doveadm -D backup -Ru user tcps:foo.example.com:12345
John
participants (2)
-
John Fawcett
-
Rachel Roch