[Dovecot] Help setting up SSL?

[Clark C. Evans]

Mike,

I am also experiencing a similar error message; only using Mozilla
and "mutt" clients against FreeBSD 4.8 (using the install from ports);
I get the same "decryption failed or bad record mac" error, but I 
don't get the remaining messages you have.

Anyway, it seems there is a similar issue on the modssl list,
http://www.mail-archive.com/modssl-users@modssl.org/msg16180.html
and it looks like it may be related to a newer version of OpenSSL
which perhaps changed a few interfaces without broadcasting it
loudly enough?  

I'm must a simple user here... so I don't even know where to begin
tracking this bugger down.

Best,

Clark

On Tue, Jun 10, 2003 at 01:26:58PM -0700, Mike Matz wrote:
| Hi,
| 
| Sorry to bother, I don't know if this mailing list is the right place to 
| look for help setting up dovecot..  Anyway I've got standard IMAP working 
| fine, and I used mkcert.sh after editing the openssl config, and it seemed 
| to work properly (I had to change some directories, I am using the FreeBSD 
| 5.1-CURRENT port)..
| 
| Anyway, when I try to connect using Outlook, here is what the log shows:
| (without the exact ip address shown, dont hax0r my windows machine!)
| 
| imap-login: Jun 10 13:13:14 Warning: SSL_accept() failed: 
| error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad 
| record mac [12.106.77.x]
| imap-login: Jun 10 13:13:14 Warning: SSL_accept() syscall failed: EOF 
| [12.106.77.x]
| imap-login: Jun 10 13:13:14 Panic: key not found from hash
| dovecot: Jun 10 13:13:14 Error: child 32935 (login) killed with signal 6
| imap-login: Jun 10 13:13:14 Warning: SSL_accept() failed: 
| error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad 
| record mac [12.106.77.x]
| imap-login: Jun 10 13:13:14 Warning: SSL_accept() syscall failed: EOF 
| [12.106.77.x]
| imap-login: Jun 10 13:13:14 Panic: key not found from hash
| dovecot: Jun 10 13:13:14 Error: child 32937 (login) killed with signal 6
| 
| 
| so it says "decryption failed or bad record mac".. Does this mean I don't 
| have my .pem files set up correctly?  Or is there a problem with the 
| OpenSSL libraries?
| 
| I'd sure appreciate any help you could give me.
| 
| Thanks,
| 
| Mike
|