[Dovecot] SSL_accept failed

[OpenMacNews]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

hi tim,

- -- On September 9, 2006 10:28:29 AM -0700  Timothy Martin 
<instanttim at mac.com> wrote:

> Hello, I'm new to dovecot. I just installed it a few days ago on
> FreeBSD via the ports and got it up and running without too much
> trouble. Although yesterday I turned on the SSL/TLS features and
> tried to get secure connections to work.
>
> I don't get any error messages when launching dovecot, I saw it
> successfully create the SSL parameters after first enabling the
> feature yet I can't seem to get a successful connection. Normal non-
> ssl connections work fine.
>
> What happens:
> 	1) my client claims to be attempting the connection.
> 	2) things go on for some time with nothing happening
> 	3) finally the dovecot log pops up with these messages
> 		dovecot: Sep 09 02:25:23 Warning: imap-login: SSL_accept() syscall
> failed: EOF [x.x.x.x]
> 		dovecot: Sep 09 02:25:23 Info: imap-login: Disconnected:
> rip=x.x.x.x, lip=x.x.x.x, TLS handshake
> 		dovecot: Sep 09 02:26:23 Info: imap-login: Disconnected:
> Inactivity: rip=x.x.x.x, lip=x.x.x.x, TLS handshake
>
> FYI: I've regenerated a fresh cert and key, just for dovecot and I'm
> using Mac OS X's Mail client.

i'm running dovecot on OSX, but have previously had _similar_ troubles 
that, eventually, turned out to be borked certs.

have you checked/verified the certs?

if not, take a look with:

(1) another server, if you have it
(2) mulberry MUA (mulberrymail.com) or thunderbird.  both have nice 
cert view capabilities.  simply dunno if Mail.app does -- i don't use it
(3) check your certs with, e.g.:

openssl verify -verbose -issuer_checks -purpose sslserver -CAfile 
'my_CA_CERT' 'my_SVR_CERT'

fwiw, there's a useful reference starting point here:

  "Certificate Management and Installation with OpenSSL"
  http://gagravarr.org/writing/openssl-certs/

hth,

richard

- -- 

/"\
\ /  ASCII Ribbon Campaign
 X   against HTML email, vCards
/ \  & micro$oft attachments

[GPG] OpenMacNews at gmail dot com
fingerprint: 50C9 1C46 2F8F DE42 2EDB  D460 95F7 DDBD 3671 08C6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iEYEARECAAYFAkUDABEACgkQlffdvTZxCMbRLQCgqJ/UOWhrJYK1RdueynC+fQKt
izIAoMKGMQd46gExFNIu/4B9cbgrkCCj
=4mpP
-----END PGP SIGNATURE-----