Can you do some experimenting with openssl s_client?

openssl s_client -connect ipv6 -servername dnsname server:993

see if this triggers it?

Aki

On 13/09/2023 18:37 EEST Ján Ondrušek <ondrusek.jan@gmail.com> wrote:

The only modification in the configs I sent is to shorten the domain names and IPv6 prefixes. Is there anything else I should’ve attached?

A full repro would require TLS certificates and keys too.

Thanks, Jan

On Tue, Sep 12, 2023 at 10:54 PM Aki Tuomi <aki.tuomi@open-xchange.com> wrote:

...

...

On 13/09/2023 05:01 EEST Ján Ondrušek <ondrusek.jan@gmail.com> wrote:

Hi!

I see this intermittent error with my dovecot setup.

The most puzzling part is that it sometimes works and sometimes rejects connections, spitting out the log I attached in systeport (DNS).

I am binding both ipv4 (TLS+SNI) and ipv6 (dedicated addresses). TLS certificates for corresponding DNS are shared across ipv4 / ipv6.

Thank you, Best regards, Jan

Any chance you could send set of config files that reproduce this issue, or your original config files?

Aki

---

dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org