[Dovecot] Question about imaps

[Victor Oñate]

Try to conect from shell

# telnet server 993



2011/11/21 Joe Giles <jgiles at cybermesa.com>:
> On Monday, November 21, 2011 01:20:55 PM Jerry wrote:
>> On Mon, 21 Nov 2011 09:40:02 -0700 (MST)
>> jgiles at cybermesa.com articulated:
>>
>> > On Mon, November 21, 2011 8:44 am, jgiles at cybermesa.com wrote:
>> > > Hi List!
>> > >
>> > > Had a questions about imap vs. imaps.
>> > >
>> > > I read the ssl article at http://wiki2.dovecot.org/SSL and from
>> > > what I am reading, imaps is no longer needed as imap with initiate
>> > > SSL/TLS on its own if STARTTLS is started and I have
>> > > disable_plaintext_auth=yes and ssl=required settings.
>> > >
>> > > I do have SSL up and working, and can connect using imap (143) to my
>> > > server without issue, but was not able to connect using imaps (993)
>> > > using Kmail as my client.
>> > >
>> > > I Was getting a client error stating that the authentication failed
>> > > using my password. However, there was nothing in the mail.err or
>> > > mail.log file even when I enable debugging.
>> > >
>> > > If I specify imaps as my only protocol, then dovecot fails to even
>> > > start without any error loging at all.
>> > >
>> > > As I stated, imap works just fine.
>> > >
>> > > So, is imaps deprecated as mentioned in the article and imaps no
>> > > longer needed?
>> > >
>> > > I am running Dovecot 2.0.13 on an Ubuntu 11.10 64bit server.
>> > > This server is simply an imap serer and not a MTA (No postfix or
>> > > sendmail installed.)
>> > >
>> > > Thanks!
>> > > Joe
>> >
>> > LOL, replying to my own e-mail...
>> >
>> > I just discovered that the problem is most likely in my Kmail 2
>> > client.
>> >
>> > Tried to connect using the following:
>> >
>> > openssl s_client -connect mymailserver.com:993
>> >
>> > I was able to connect, log in, and get information about my mail
>> > folders.
>> >
>> > Will try Thunderbird when I get home from work. Kmail 2 is still a
>> > WIP I guess.
>> >
>> > That said, I am still reading that imap with starttls is the way to
>> > go, so might be a moot issue.
>> >
>> > Thanks!
>> > Joe
>>
>> Try this: (substitute your actual host for "remote.host")
>>
>> openssl s_client -connect remote.host:143 -starttls imap
>>
>> See if you get a connection. If so, then the server offers STARTTLS.
>>
>>
>
> Hi, Jerry,
>
> Thanks for the information.
>
> Yes, I ran that command and got my cert and other information proving to me that TLS is working. I was also able to log in and get mailbox information.
>
> Thanks again!
> Joe
>