How to make IMAPS SSL Cert for Dovecot that works with Thunderbird

[Felipe Gasper]

From what I can tell, “SSL alert number 42” means that you’ve configured Dovecot to require client authentication.

Otherwise, your Let’s Encrypt certificate (with its authority chain) should suffice.

-FG

> On May 24, 2020, at 5:45 PM, hanasaki at gmail.com wrote:
> 
> Hello all,
> 
> What are the instructions for making an SSL cert for Dovecot IMAPS?
> 
> Two methods have been tried, and work, with Evolution; however generate the following error when Thunderbird tries to connect.
> 
> Thank you,
> 
> method 1 : self signed
> openssl req -newkey rsa:4096 -sha512 -x509 -days 365 -nodes -keyout mykey.key -out mycert.pem
> 
> method 2 : Let's Encrypt (LE) CA
> Created with Certbot
> 
> ERROR
> TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<+oooooo>
> <hanasaki.vcf>