[Dovecot] One important question!
Hello!Please, give me a feedback as soon as you can! I need some advice regarding "dovecot self signed certificate" configuration!If you have any experience in working with php IMAP-module that would be useful for me to know what would you say about below: Problem: I can connect to my INBOX through telnet, but I cannot do it through imap-functions (Certificate failure for ...)? My best,Edward.
On 12/18/2011 08:05 PM I M wrote:
Hello!Please, give me a feedback as soon as you can! I need some advice regarding "dovecot self signed certificate" configuration!If you have any experience in working with php IMAP-module that would be useful for me to know what would you say about below:
Problem: I can connect to my INBOX through telnet, but I cannot do it through imap-functions (Certificate failure for ...)? My best,Edward.
http://php.net/manual/en/function.imap-open.php#refsect1-function.imap-open-... … /novalidate-cert do not validate certificates from TLS/SSL server, needed if server uses self-signed certificates …
Regards, Pascal
The trapper recommends today: 5e1f1e55.1135220@localdomain.org
Thank you for the response, Pascal!But I have read the all flags and functions that might be useful for this problem before sending this letter.Please, find one more minute to know what I've done yet!
- I installed MTA (sendmail) first. Then tuned it for receiving and sending emails outside of localhost. As for MDA I used "MAILER(`local')" as dovecot has built in one! 2. I installed IMAP Server (dovecot). I made it working in PLAIN LOGIN mode on imap protocol. But as you know it doesn't mean that dovecot won't use SSL/TLS. So we are going to transmit out data as a plain text inside SSL/TLS. (see http://wiki1.dovecot.org/SSL, "... Some clients unfortunately try to do plaintext authentication without STARTTLS, even when IMAP server has told the client that it won't work." ). So when you try to disable ssl-support in dovecot.conf, you are going to get the message "SECURITY PROBLEM: insecure server advertised AUTH=PLAIN ...". The same message you get when putting "/notls" flag. That why I thought It might be a certificate configuration problem on the client side! Cause when I tried to put the /novalidate-cert flag in string "$mbox = imap_open("{XXXXXX.com:143/novalidate-cert}","user_name","user_password");" I immediately got the message: "Undefined variable: mbox in ...". Also keep in mind that the connection to imap server (dovecot) can be established through telnet. So my guess is around misconfiguration of php5-imap module! I've also checked apache-server configuration cause it could also be a problem as I use php-functions on webserver environment. So what would you say?Please, correct me if I am wrong.Thanks again for the response and, please give me a feedback as soon as you can! My best,Edward. --- On Sun, 12/18/11, Pascal Volk<user+dovecot@localhost.localdomain.org> wrote:
From: Pascal Volk <user+dovecot@localhost.localdomain.org> Subject: [Dovecot] OT: PHP imap_open [was: One important question!] To: "Dovecot Mailing List" <dovecot@dovecot.org> Date: Sunday, December 18, 2011, 2:12 PM
On 12/18/2011 08:05 PM I M wrote:
Hello!Please, give me a feedback as soon as you can! I need some advice regarding "dovecot self signed certificate" configuration!If you have any experience in working with php IMAP-module that would be useful for me to know what would you say about below: Problem: I can connect to my INBOX through telnet, but I cannot do it through imap-functions (Certificate failure for ...)? My best,Edward.
http://php.net/manual/en/function.imap-open.php#refsect1-function.imap-open-... … /novalidate-cert do not validate certificates from TLS/SSL server, needed if server uses self-signed certificates …
Regards, Pascal -- The trapper recommends today:5e1f1e55.1135220@localdomain.org --- On Sun, 12/18/11, Pascal Volk <user+dovecot@localhost.localdomain.org> wrote:
From: Pascal Volk <user+dovecot@localhost.localdomain.org> Subject: [Dovecot] OT: PHP imap_open [was: One important question!] To: "Dovecot Mailing List" <dovecot@dovecot.org> Date: Sunday, December 18, 2011, 2:12 PM
On 12/18/2011 08:05 PM I M wrote:
Hello!Please, give me a feedback as soon as you can! I need some advice regarding "dovecot self signed certificate" configuration!If you have any experience in working with php IMAP-module that would be useful for me to know what would you say about below: Problem: I can connect to my INBOX through telnet, but I cannot do it through imap-functions (Certificate failure for ...)? My best,Edward.
http://php.net/manual/en/function.imap-open.php#refsect1-function.imap-open-... … /novalidate-cert do not validate certificates from TLS/SSL server, needed if server uses self-signed certificates …
Regards, Pascal
The trapper recommends today: 5e1f1e55.1135220@localdomain.org
Your emails are extremely poorly formatted and too much trouble to try to read.
If you want to get help, you should learn how to properly compose an email.
On 2011-12-19 1:19 PM, I M <profymath@yahoo.com> wrote:
Thank you for the response, Pascal!But I have read the all flags and functions that might be useful for this problem before sending this letter.Please, find one more minute to know what I've done yet!
- I installed MTA (sendmail) first. Then tuned it for receiving and sending emails outside of localhost. As for MDA I used "MAILER(`local')" as dovecot has built in one! 2. I installed IMAP Server (dovecot). I made it working in PLAIN LOGIN mode on imap protocol. But as you know it doesn't mean that dovecot won't use SSL/TLS. So we are going to transmit out data as a plain text inside SSL/TLS. (see http://wiki1.dovecot.org/SSL, "... Some clients unfortunately try to do plaintext authentication without STARTTLS, even when IMAP server has told the client that it won't work." ). So when you try to disable ssl-support in dovecot.conf, you are going to get the message "SECURITY PROBLEM: insecure server advertised AUTH=PLAIN ...". The same message you get when putting "/notls" flag. That why I thought It might be a certificate configuration problem on the client side! Cause when I tried to put the /novalidate-cert flag in string "$mbox = imap_open("{XXXXXX.com:143/novalidate-cert}","user_name","user_password");" I immediately got the message: "Undefined variable: mbox in ...". Also keep in mind that the connection to imap server (dovecot) can be established through telnet. So my guess is around misconfiguration of php5-imap module! I've also checked apache-server configuration cause it could also be a problem as I use php-functions on webserver environment. So what would you say?Please, correct me if I am wrong.Thanks again for the response and, please give me a feedback as soon as you can! My best,Edward.
--
Best regards,
Charles
participants (3)
-
Charles Marcus
-
I M
-
Pascal Volk